opnsense / opnsense/plugins

security/acme-client: logging not initialised correctly on new installations

Open
#4,665 6 comments 1 reaction 1 assignee View on GitHub

@fraenki is already working on this.

Since May 19, 2025.

bug
Dominant language
PHP
Stars
1.2k
Forks
863
Avg merge
2d 6h
Merged PRs (30d)
10

Description

Important notices
Before you add a new report, we ask you kindly to acknowledge the following:

Describe the bug
When a fresh installation is used, installing os-acme-client does not initialize syslog-ng to log the plugin's to the correct file.

To Reproduce
Steps to reproduce the behavior:

  1. Use a fresh OpnSense installation
  2. Install os-acme-client plugin
  3. Set up an ACME account, authentication method and certificate
  4. Try to issue a new certificate
  5. Got to logs section, "Services: ACME Client: Log Files", switch to "ACME Log" tab.
  6. Note the empty display - there should be ACME.sh output here. Also, you can look at /var/log/acmeclient/ and it will be empty (or the folder does not even exist).

Expected behavior
The acme plugin output should be visible in the GUI in order to find specific problems with certificate issuance.

Relevant log files
/var/log/acmeclient/... (which are non existent).

Additional context
Looking at an older installation where the problem does not occur, I see a dedicated section for acmeclient in /usr/local/etc/syslog-ng.conf.d/syslog-ng-local.conf which looks like:

###################################################################
# Local syslog-ng configuration filter definition [acmeclient].
###################################################################
filter f_local_acmeclient {
    program("acme.sh");
};
destination d_local_acmeclient {
    file(
        "/var/log/acmeclient/acmeclient_${YEAR}${MONTH}${DAY}.log"
        create-dirs(yes)
        flags(syslog-protocol)
    );
};
log {
    source(s_all);
    filter(f_local_acmeclient);
    destination(d_local_acmeclient);
};

This exact section is missing on new installations - IDK when this problem was introduced. Once I create it manually and reboot, the log files are populated.

Environment
OPNsense 25.1.5_5 (amd64).

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.