OPNsense Forum

Archive => 20.1 Legacy Series => Topic started by: krempel on July 02, 2020, 05:07:56 pm

Title: Update to 20.1.8 and IPSEC VPN faded away
Post by: krempel on July 02, 2020, 05:07:56 pm

Hello, sorry i'm a kind of newbie here,

Automatically Updated from 20.1.7 to 20.1.8 right now and soon a nightmare effect:
In the dashboard, IPsec part lost all the tunnels.
Okay, let's examine unter /VPN/IPsec/Tunnel Settings: There they are, also checked the "Enable IPsec".

But Status Overview is empty, strongswan is running, No IPsec traffic going to the peers.

Good luck, i just tried on my testing-car, not on the real machine, both machines are real hardware, no virtuals.

After reinstalling 20.1 from the image and let the config being fetched, all running well on 20.1.

But how do i limit the update to 20.1.7 avoiding this fatal 20.1.8?

Any suggestions?

Good evening
Krempel (from Germany)
 

Title: Re: Update to 20.1.8 and IPSEC VPN faded away
Post by: mimugmail on July 02, 2020, 05:19:11 pm

Via CLI:

opnsense-revert -r 20.1.7 opnsense

This reverts only the GUI part to 20.1.7 while software is at 20.1.8

Title: Re: Update to 20.1.8 and IPSEC VPN faded away
Post by: mimugmail on July 02, 2020, 05:30:03 pm

I can reproduce .. https://github.com/opnsense/core/issues/4189

Title: Re: Update to 20.1.8 and IPSEC VPN faded away
Post by: krempel on July 02, 2020, 05:39:34 pm

First of all, many thanks for this impressively fast response :-)

Well, this resets the gui to 20.1.7 as you wrote, but it seems, the underlying IPsec is not working right anymore, so i need a limitation of the whole packages to 20.1.7, else my VPNs are dead.

So, i revert to 20.1 as a emergency act and avoid the firmware upgrade.


Happy, this got my home OPNSense only, not the "production" one in my office.

Good Night

Title: Re: Update to 20.1.8 and IPSEC VPN faded away
Post by: fightingmasta on July 02, 2020, 06:33:06 pm

opnsense-patch 30a9195 worked for me. :)

Title: Re: Update to 20.1.8 and IPSEC VPN faded away
Post by: c-mu on July 02, 2020, 07:37:35 pm

I got the same issue and can confirm, that opnsense-patch 30a9195 is working!

Title: Re: Update to 20.1.8 and IPSEC VPN faded away
Post by: Perun on July 03, 2020, 06:24:03 am

same issue here... how can I apply the patch?

Title: Re: Update to 20.1.8 and IPSEC VPN faded away
Post by: mimugmail on July 03, 2020, 06:58:50 am

Via cli, the command above. Hotfix will come today ...

Title: Re: Update to 20.1.8 and IPSEC VPN faded away
Post by: franco on July 03, 2020, 08:26:02 am

Looking at the issue and the fix it was caused by a third party library update (not a direct result of a core change) and only affects status display, not operation.


Cheers,
Franco

Title: Re: Update to 20.1.8 and IPSEC VPN faded away
Post by: franco on July 03, 2020, 08:31:24 am

PS: Suffice to say things like this are practically impossible to catch with a 100% success rate, especially if it does not affect operation so we have less indication that something is wrong. Nevertheless, a hotfix should be on the way to address this later today. And still for all means and purposes the opnsense-patch is more than enough to do.

Title: Re: Update to 20.1.8 and IPSEC VPN faded away
Post by: penguin44 on July 03, 2020, 05:35:32 pm

Thanks for all your help with this project.

Are you going to post another announcement when the hot fixes are included?

Regards,
Richard

Title: Re: Update to 20.1.8 and IPSEC VPN faded away
Post by: franco on July 04, 2020, 12:46:29 pm

See reply at the original annoucement:

https://forum.opnsense.org/index.php?topic=17909.msg81445#msg81445


Cheers,
Franco