Messages

1

Zenarmor (Sensei) / Re: Sensei on OPNsense - Application based filtering

« on: July 16, 2020, 05:00:10 pm »

mb,

I having a big problem - after upgrading from free -> premium - every couple of days the Sensei instance seems to be killing my internet. I have to login to the shell and kill the sensei process. Then everything starts work again.. a reboot does not fix it .. the problem persists until I kill the process.. i sent in a bug report but I was wondering if you guys had seen this before or someone else on this forum.

2

Zenarmor (Sensei) / Re: Sensei on OPNsense - Application based filtering

« on: July 09, 2020, 11:32:49 pm »

What are these messages on the logs?

Jul 9 16:28:12    kernel: /usr/local/sensei/output/active/temp: optimization changed from SPACE to TIME

3

Zenarmor (Sensei) / Re: Sensei on OPNsense - Application based filtering

« on: July 08, 2020, 11:07:53 pm »

mb - it will go above 100% to 104% etc... (in my previous post - the network is quiet).

4

Zenarmor (Sensei) / Re: Sensei on OPNsense - Application based filtering

« on: July 07, 2020, 05:44:28 pm »

During high network utilization I see..

0% /usr/local/sensei/output/active/temp [ufs]

go above 100% - is that normal?

5

20.1 Legacy Series / WebUI not loading after SSL cert update

« on: July 07, 2020, 04:22:00 pm »

Hello Guys.. have a bit of a problem.. Yesterday I updated the SSL certificate from the default one to the one for my domain .. on the webui config page.. now the UI is not loading.. I see the following error message on the logs..

root@OPNsense:/var/log # /usr/local/etc/rc.restart_webgui
Starting web GUI...failed.
Generating RRD graphs...done.
root@OPNsense:/var/log # /usr/local/sbin/lighttpd -f /var/etc/lighty-webConfigurator.conf
2020-07-07 09:19:54: (mod_openssl.c.513) SSL: couldn't read private key from '/var/etc/cert.pem'
2020-07-07 09:19:54: (server.c.1207) Initialization of plugins failed. Going down.

When I cat /var/etc/cert.pem

I see the following (keys removed)

root@OPNsense:/var/etc # more cert.pem
-----BEGIN CERTIFICATE-----
XXXXXXXX
-----END CERTIFICATE-----
-----BEGIN PRIVATE KEY-----
XXXXXXXXXX
-----END PRIVATE KEY-----

looks like it cannot read the private key? Any way to revert this to the "default" ssl cert?