Messages

1

23.1 Legacy Series / Re: [SOLVED] ACME plugin with Gandi LiveDNS

« on: May 17, 2023, 06:30:01 am »

Outstanding.  That was it.  I modified the .conf file, re-issued a certificate, and all looks good.

Thank you very much for the pointer!

I struggled with the same issue for months and when I finally found a solution it was a great relief so I can understand how helpful it can be for others.

Sent from my AC2003 using Tapatalk

2

23.1 Legacy Series / Re: ACME plugin with Gandi LiveDNS

« on: May 14, 2023, 08:30:03 am »

Problem can come from old API key being used:

Workaround is to manually edit the acme-client account.conf file and change the API key to latest value:

1. Login into opnsense root shell account.
2. Edit /var/etc/acme-client/accounts/*/account.conf
3. Replace latest Gandi API key in GANDI_LIVEDNS_KEY='your.latest.gandi.api.key'

Then try to re-generate your certs.

See: https://github.com/acmesh-official/acme.sh/issues/2011

3

Virtual private networks / Re: Upgrade to 22.7.5 stack trace with RSA Class breaks VPN SSL Certs verification

« on: October 06, 2022, 07:15:39 pm »

The patch mentioned in https://forum.opnsense.org/index.php?topic=30569.0 fixed the issue.

Thank you Franco for redirecting me to that post, and apologies for the redundant post.

(I have removed the useless info I posted earlier)

4

Virtual private networks / Upgrade to 22.7.5 stack trace with RSA Class breaks VPN SSL Certs verification

« on: October 05, 2022, 05:26:12 pm »

During upgrade from 22.7.4 to 22.7.5:

Fatal error: Uncaught Error: Class "phpseclib3\Crypt\Common\AsymmetricKey" not found in /usr/local/share/phpseclib/Crypt/RSA.php:69
Stack trace:
#0 /usr/local/etc/inc/certs.inc(34): require_once()
#1 /usr/local/etc/inc/config.inc(40): require_once('/usr/local/etc/...')
#2 /usr/local/etc/rc.configure_plugins(35): require_once('/usr/local/etc/...')
#3 {main}
  thrown in /usr/local/share/phpseclib/Crypt/RSA.php on line 69
Reloading template OPNsense/Nginx: OK
[59/64] Upgrading opnsense from 22.7.4 to 22.7.5...
[59/64] Extracting opnsense-22.7.5: ........

Since then OpenVPN Server throws an SSL CErt error when trying to connect client:

Error openvpn   OpenSSL: error:1417C086:SSL routines:tls_process_client_certificate:certificate verify failed

5

Zenarmor (Sensei) / Re: Sensei on OPNsense - Application based filtering

« on: April 22, 2020, 08:17:37 am »

Hello @mb,

Thank you for your reply !

So according to what you replied, I could potentially mount a second hard drive to a path (ie /mnt/storage) which I would then reference as displayed in your post in the path section ?

There is no application (sensei) limitation to the path I will be able to provide ?

Looking forward to being able to use this as my current HD is at 90% usage

6

Zenarmor (Sensei) / Re: Sensei on OPNsense - Application based filtering

« on: April 21, 2020, 01:36:48 pm »

Hi faisal,

Good, you can now do the initial configuration, it should install Elasctic now.

Currently database location is /var/db. Upcoming 1.4 or 1.5 will move it to /usr/local since /var can be a temp memory file system in OPNsense.

For disk sizing, you can use this guide:

https://help.sunnyvalley.io/hc/en-us/articles/360025047373-Hardware-Requirements

Could you please explain how I can move db location to a secondary disk  / partition ?

Thx

7

16.7 Legacy Series / Re: Google Backup issue

« on: October 03, 2017, 09:19:56 am »

Any luck ? I seem to have the same issue.