REST endpoint to get Jetty‘s TLS certificate

[florian-h05]

This is a feature request to add a REST endpoint, where Jetty‘s TLS certificate can be retrieved.

This would allow the UI to provide the user a simple and convenient way to download the TLS certificate in use by openHAB, which is most likely is a self-signed certificate, and have the user install it onto their system to use HTTPS for access to openHAB and get rid of the self-signed cert warnings of the browser.

[openhab-bot]

This issue has been mentioned on openHAB Community. There might be relevant details there:

https://community.openhab.org/t/feedback-on-installing-openhab-with-latest-versions/154238/26

[J-N-K]

cf. https://github.com/openhab/openhab-core/pull/2905

[ghys]

To be fair it's different to #2905 which allowed to change the certificate.

Retrieving it is actually pretty easy - for instance in Firefox:

And after clicking "View Certificate":

For Chromium-based browsers:

After clicking the "Certificate is not valid" option (which changes if it does become valid), there is an "Export" button:

You might even use the commandline:

$ openssl s_client -showcerts -connect <server>:8443