I am searching for a instruction on how to setup a centralized certificate manager and update all my devices (around 10 for now) . Is there a way to use some software or docker container to renew the certificates and send them to the openwrt devices based on a IP/FQDN list + credentials (LDAP user would be a dream come true) ?
I read about acme.sh and how to deploy on a device, but when it comes to multiple devices, most of the post I found on the web explain that, its not so clean and easy to use with multiple devices…maybe there is a better solution
Appreciate if you could share with me how you did it.
Here is a short history of my OpenWRT experiences and usage:
I am using openwrt since version 17 (I dont remember the exactly the year… but I could check my old svn repository ) and have expanded my network a lot since then.. build VPN between multiple locations, VLANs, APs.. All nice stuff. I really like the platform. Works like a charm for me.
Like brada4 implies, use some network copy command.
For scripting purposes, I would likely use scp, and if you use SSH keys, you don't even need password with scp.
Additionally, you might in each router define a procd trigger for uhttpd, so that it the key file changes, config is reloaded / uhttpd restarted. (Edit: there apparently is a hotplug defined already.)
Then you could just have a centralised update script, that renews the certificate and then copies it to other routers, which automatically apply it.
