Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - paul-ncx

#1
We need this as well. We are currently deciding whether to shift our DNS forwarding from OpnSense to another device just so we can have access to DNSTAP data.
#2
I have configured GeoIP to download the zip file from an internal server. The certificate for this server is signed by an internal CA. If I run download_geoip.py directly, it refuses to download the file reporting: OpenSSL.SSL.Error: [('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')]

We already have our internal CA listed in "System: Trust: Authorities", but this does not seem to help.

Has anyone found a way to successfully download GeoIP data in a similar scenario or have any suggestions on what to try?

I have been having this problem since 19.7, but finally felt like I had enough information to make a useful post.