# PfSense, Remote LAPI with TLS

**URL:** <https://discourse.crowdsec.net/t/pfsense-remote-lapi-with-tls/2226>\
**Category:** crowdsec\
**Created:** [December 31, 2024, 6:03pm UTC](https://discourse.crowdsec.net/t/pfsense-remote-lapi-with-tls/2226 "2024-12-31T18:03:17Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![urbaman](https://avatars.discourse-cdn.com/v4/letter/u/b2d939/32.png) [@urbaman](https://discourse.crowdsec.net/u/urbaman)\
**Post date:** [December 31, 2024, 6:03pm UTC](https://discourse.crowdsec.net/t/pfsense-remote-lapi-with-tls/2226/1 "2024-12-31T18:03:18Z")

</div>

Hi,

I cannot seem to be able to register pfsense machine/booncer with a remote lapi using TLS.

If I try to connect to [https://lapi-ip:8080/](https://lapi-ip:8080/) I receive a

`time="2024-12-31T18:57:55+01:00" level=fatal msg="unable to start crowdsec routines: authenticate watcher (pfsense): Post \"https://10.0.100.204:8080/v1/watchers/login\": performing jwt auth: tls: failed to verify certificate: x509: cannot validate certificate for 10.0.100.204 because it doesn't contain any IP SANs"`

If I try to connect to [http://lapi-ip:8080/](http://lapi-ip:8080/) I receive a

`time="2024-12-31T19:02:07+01:00" level=fatal msg="unable to start crowdsec routines: authenticate watcher (pfsense): API error: http code 400, no response body"`

Is there a way to manage the registration through the TLS handshake?

Thank you.

---

<div class="post-metadata">

**Author:** ![iiAmLoz](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/iiamloz/32/386_2.png) [@iiAmLoz](https://discourse.crowdsec.net/u/iiAmLoz)\
**Post date:** [January 2, 2025, 9:57am UTC](https://discourse.crowdsec.net/t/pfsense-remote-lapi-with-tls/2226/2 "2025-01-02T09:57:15Z")

</div>

How did you generate the TLS certificates that the LAPI is using?