Messages

I have now switched back to the community version and now it works again.

And the "Allowed addresses" function does not work with my captive portal either. What am I doing wrong?

I have set up a FreeRADIUS, a NetIQ eDirectory and a Microsoft Active Directory as logon servers. The logon test (System: Access: Tester) for all three logon servers returns: "User: testuser authenticated successfully.

With the captive portal, however, I only ever get the message: "authentication failed".

Is there a general problem with the login for the captive portal service?


---
OPNsense 22.4.3_1 (amd64/OpenSSL)
Type: Business
FreeBSD 13.0-STABLE
OpenSSL 1.1.1q 5 Jul 2022

I was affected by the problem that the acme client always had OCSP stapling enabled (#794)

To fix the problem I corrected the configuration file manually. Then it worked for me again. Now the certificate has expired and was automatically renewed with OCSP stapling enabled again.

Now I have installed a certificate that does not come from Let's Encrypt manually. Now it works again.

But in the future I would like to use certificates from Let's Encrypt again. I would like to validate them using the DNS API method. Unfortunately I still have problems connecting the OPNsense acme-client to my PowerDNS...

Cheers,

Micha

Hello Franco,

thank you for your answer.

But my problem is a different one: I can register. With the Chrome Browser it works without problems. With Firefox everything works if I have turned off OCSP_must_staple. The problem is that with Firefox OCSP_must_staple is enabled by default. The normal Firefox user gets only an error message instead of the login page.

The configuration of the weberver responsible for the logon page of the Captive Portal seems to have OCSP_must_staple enabled. I am trying to figure out how to disable OCSP_must_staple on lighttpd. It is also strange that OCSP_must_staple is disabled on the WebGUI.

Cheers,

Micha

Hi there,

after the update to version 19.7.10 I can't connect with Firefox to the Captive Portal login page. Error message: MOZILLA_PKIX_ERROR_REQUIRED_TLS_FEATURE_MISSING

After disabling ocsp_must_staple in Firefox via about:config (security.ssl.enable_ocsp_must_staple setting=false) it works again.

Is this a bug or am I doing something wrong?

Cheers,

Micha