How to upgrade wildcard certificates on a Virtual Web Server?

Question

We use wildcard certificates with most of our websites. It has been tedious with Sophos since it tries to be helpful and pulls the domain names from the cert and uses them as the default. We need more granular control of the domain on our virtual webservers, so I delete the defaults and enter the domains I am publishing. The problem is that there is a bug in the Virtual Webserver form that if you expand the "Advanced" option after entering the custom domains, Sophos deletes all custom entries and reverts to the default wildcard domains. Tedious when you forget to expand "Advanced" first. 
 Anyways, now my wildcard is expiring and I need to upgrade the certificate. I uploaded the new certificate, went to the virtual webserver, selected it and all of my custom domains were once again deleted in favor of the defaults. Luckily I noticed and didn't click save. 
 So this is a pain when you have lots of domains and virtual web servers in use. Every time you enter this info, you run the risk of typos. Anyone know of a way to work around this "feature" without having to recreate everything?

BAlfson · Answer

Hi Nick and welcome to the UTM Community! 
 There may be a way using RESTful API, but I suspect that it's not possible to replace an existing, in-use cert with one with an identical REF_. 
 Depending on the number of Virtual Servers, I might use string operators in a spreadsheet to create lists of cc commands to replace an old cert with a new one in each Virtual Server object. First, I would need the REF_ of the cert named "Example 1": 
 cc get_object_by_name ca host_key_cert 'Example 1'|grep ref 
 That would return something like 'ref' => 'REF_CaHosExamp1', 
 Then, I would query for the list of Virtual Server REF_s and certificate used: 
 cc get_objects reverse_proxy frontend |grep 'certificate\|ref' 
 That would return something like: 
 'certificate' => '', 'ref' => 'REF_RevFroDomain', 'certificate' => 'REF_CaHosExamp1', 'ref' => 'REF_RevFroServeA', 'certificate' => 'REF_CaHosExamp1', 'ref' => 'REF_RevFroServeB', 
 I want to replace the "Example 1" cert with the "Example 2" certificate in "Server A" and "Server B": 
 cc change_object REF_RevFroServeA certificate REF_CaHosExamp2 cc change_object REF_RevFroServeB certificate REF_CaHosExamp2 
 Cheers - Bob