Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Topics - alone_k1

#1
Tutorials and FAQs / how does config.xml file generate?
September 07, 2018, 02:37:51 PM
hi all, wanted to know how does config.xml file generate ?

in this address : /conf/config.xml

which command or file generates config.xml file ?
thanks
#2
hi, how can i disable and enable some of the ciphers that are supported by sshd ?
i edit this file:
vim /etc/ssh/sshd_config

and then restart the sshd
service openssh onerestart

and check for supported list of ciphers :
sshd -T | grep ciphers

but nothing changes , how i can change list of supported ciphers?
i asked it somewhere else in this forum too , im in a very hurry , can anyone help me ?
#3
hi, how can i disable and enable some of the ciphers that are supported by sshd ?
i edit this file:
vim /etc/ssh/sshd_config

and then restart the sshd
service openssh onerestart

and check for supported list of ciphers :
sshd -T | grep ciphers

but nothing changes , how i can change list of supported ciphers?
#4
Respected OPNSense team,
there is a problem when i use LDAP with SSL-Encryption feature.

according to the following picture :
when i try to choose SSL-Encryption from  System -> Servers -> Transport


and after adding the certificate that is generated on the LDAP Server to the authorities part (System -> Trust -> Authorities); after adding user from the ldap directory and giving it the effective privileges, i tried to login , the first time i tried it work correctly but after restarting configd and login from dashboard i can't login anymore. when i check the logging section i get the following error:



i tried running list_ciphers.py file and there isn't any problem with it:


i also checked the ssl connection with LDAP server using openssl, and there isn't any problem with it either:




i don't know what is wrong , may someone help me. it's very important for me, i'm working in an enterprise-level company and its necessary to make connection using SSL-Encryption.
thanks