Is there an example of uploading an LE cert to UTM 9?

Hi yobyotan 

I don't think it would be possible to do it using a cronjob even when you are able to provide a specific location to download the certificate. As it would not be possible to add it in UTM in a way that it can be used from GUI. This remains unchartered territory for me, however.

Were you able to find something from this guide https://www.sophos.com/en-us/medialibrary/PDFs/documentation/UTMonAWS/Sophos-UTM-RESTful-API.pdf? 

Hi yobyotan 

I don't think it would be possible to do it using a cronjob even when you are able to provide a specific location to download the certificate. As it would not be possible to add it in UTM in a way that it can be used from GUI. This remains unchartered territory for me, however.

Were you able to find something from this guide https://www.sophos.com/en-us/medialibrary/PDFs/documentation/UTMonAWS/Sophos-UTM-RESTful-API.pdf? 

Thanks.

No, that document doesn't have detailed examples; it's more about the concept and design of the REST API.

This is too bad. I've been using UTM as a VPN since Astaro days -- almost 14 years. (I was a vp of marketing for Astaro.) I still prefer UTM's SSL VPN to pfSense's. 

But the lack of usable automation capability -- something I think the API was supposed to address -- marks the end of the road for me since my UTM is not on my network edge anymore and my DigiCert wildcard expires this year.

While the document @Jaydeep links is well-written. as long as there's no body of examples Sophos is relying on the few brave people who will experiment and share. Too bad Sophos didn't prep at least a few how-tos with the release of the API itself.

BTW, I could easily run a cron job (either on a different host or as a scheduled Windows task) to replace the certs using PowerShell's Invoke-RestMethod cmdlet if only I had an example of how to use the 'ca' object.

Hi and welcome back to the UTM Community!

There are quite a few examples here, but the built-in search function is not easy to use.  I prefer to use a Google including the site parameter.  For example:

site:community.sophos.com/products/unified-threat-management/f letsencrypt

Cheers - Bob

Thanks.

But it’s a sorry state when Google has to suffice instead of actual doc. My search on a mobile device yielded no actual examples of using the REST API to store a cert.

I give up. I’m retiring my UTM VM in March when it’s current cert expires.