PfSense, Remote LAPI with TLS

crowdsec
1

Hi,

I cannot seem to be able to register pfsense machine/booncer with a remote lapi using TLS.

If I try to connect to https://lapi-ip:8080/ I receive a

time="2024-12-31T18:57:55+01:00" level=fatal msg="unable to start crowdsec routines: authenticate watcher (pfsense): Post \"https://10.0.100.204:8080/v1/watchers/login\": performing jwt auth: tls: failed to verify certificate: x509: cannot validate certificate for 10.0.100.204 because it doesn't contain any IP SANs"

If I try to connect to http://lapi-ip:8080/ I receive a

time="2024-12-31T19:02:07+01:00" level=fatal msg="unable to start crowdsec routines: authenticate watcher (pfsense): API error: http code 400, no response body"

Is there a way to manage the registration through the TLS handshake?

Thank you.

2

How did you generate the TLS certificates that the LAPI is using?