security/acme-client: logging not initialised correctly on new installations
@fraenki is already working on this.
Since May 19, 2025.
- Dominant language
- PHP
- Stars
- 1.2k
- Forks
- 863
- Avg merge
- 2d 6h
- Merged PRs (30d)
- 10
Description
Important notices
Before you add a new report, we ask you kindly to acknowledge the following:
- I have read the contributing guide lines at https://github.com/opnsense/plugins/blob/master/CONTRIBUTING.md
- I have searched the existing issues, open and closed, and I'm convinced that mine is new.
- The title contains the plugin to which this issue belongs
Describe the bug
When a fresh installation is used, installing os-acme-client does not initialize syslog-ng to log the plugin's to the correct file.
To Reproduce
Steps to reproduce the behavior:
- Use a fresh OpnSense installation
- Install os-acme-client plugin
- Set up an ACME account, authentication method and certificate
- Try to issue a new certificate
- Got to logs section, "Services: ACME Client: Log Files", switch to "ACME Log" tab.
- Note the empty display - there should be ACME.sh output here. Also, you can look at /var/log/acmeclient/ and it will be empty (or the folder does not even exist).
Expected behavior
The acme plugin output should be visible in the GUI in order to find specific problems with certificate issuance.
Relevant log files
/var/log/acmeclient/... (which are non existent).
Additional context
Looking at an older installation where the problem does not occur, I see a dedicated section for acmeclient in /usr/local/etc/syslog-ng.conf.d/syslog-ng-local.conf which looks like:
###################################################################
# Local syslog-ng configuration filter definition [acmeclient].
###################################################################
filter f_local_acmeclient {
program("acme.sh");
};
destination d_local_acmeclient {
file(
"/var/log/acmeclient/acmeclient_${YEAR}${MONTH}${DAY}.log"
create-dirs(yes)
flags(syslog-protocol)
);
};
log {
source(s_all);
filter(f_local_acmeclient);
destination(d_local_acmeclient);
};
This exact section is missing on new installations - IDK when this problem was introduced. Once I create it manually and reboot, the log files are populated.
Environment
OPNsense 25.1.5_5 (amd64).
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.