Hello,
After upgrading to 26.7, the GUI is not loading correctly, and some aspects are broken.
Any suggestions welcomed.
Can you try this patch?
# opnsense-patch https://github.com/opnsense/core/commit/f4c65961cd1
# configctl webgui restart
Several people have issues with KTLS so for now it might just be the best thing to exclude it from the web GUI like it was on 26.7.
It doesn't fix other consumers of KTLS but we need to move this upstream so disabling it globally for everyone will prevent us from gathering feedback.
Cheers,
Franco
I have tried it, and it works like a charm.
Now is showing as expected.
If you need anything else, just let me know.
Thank you for your hard work.
Cheers,
Nicos
Ok great we'll add that to 26.7.1 next week then.
Cheers,
Franco
I saw on github, that fix is only in lighttpd, but this influence haproxy too from github discussions. will be global tunable switch (kern.ipc.tls.enable) included or not?
No, the tunable will not be included. It's affecting some people but definitely not everyone, so that means it's a hardware-specific issue in part.
Cheers,
Franco
So I found https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296498 and that leads to a patch https://github.com/opnsense/src/commit/54cfc12cee
If you want to try this instead:
# opnsense-update -zkr 26.7-ktls
We can help confirm this... should be in the next FreeBSD round of SA/EN as it seems.
Cheers,
Franco
Same issue on my OPNsense. Patch solved it. Thank you!
@JasMan if you have the time and motivation could you revert the patch (just run this again) and try the kernel instead? That would be more helpful at this point.
Thanks,
Franco
I just tried the new kernel but nothing changed, I'm not sure whether I'm experiencing the same issue, here's a screenshot.
When loading the dashboard nothing is displayed in the main section of the page, and in the left menu the interfaces tab is always shown as opened but if I click on "Interfaces" it will open again and be shown twice.
I'm also experiencing another issue: I can't login via ssh anymore (was using key auth). Not sure if this is also related to KTLS.
> Edit: The ssh thing was a non-issue. Forget about it.
I'll revert to the 26.1 snapshot as I can't debug further now.
THanks!
SSH is unrelated. You can still install the GUI patch on the current kernel you have to see if that is the KTLS issue.
Cheers,
Franco
Yuppp, the patch restored the GUI thanks,
Should I revert the kernel?
When checking for updates from the GUI now it proposes me to upgrade from 26.7-ktls to 26.7
You can, but it doesn't matter much.
# opnsense-update -k
(reboot)
Brings you back. Or simply check for updates (but reboot isn't optional there).
Cheers,
Franco
Done thanks!
Sorry for the perhaps silly question but I'm new to both FreeBSD and OPNsense: when applying patches with opnsense-patch , should we revert them later in order to go back on the "stable" path? Or will any subsequent version like 26.7.1 take care of it (maybe because it will contain the same patches itself?)?
Any firmware update that updates the patched component will revert to the defaults. Patches are stored locally and can be reapplied.
Normally patches are shipped fast, in this case 26.7.1 for sure so no further worries about it.
One caveat of opnsense-patch is also a feature: if you re-run the command the patch will be reversed. This can be confusing, but also super helpful for debugging.
Cheers,
Franco