Messages

1

22.7 Legacy Series / ACME does no longer have certificates after upgrade to 22.7

« on: July 28, 2022, 10:33:20 pm »

Hi,

I today updated to 22.7. After the update the ACME no longer has my certificates. All is empty. And a reimport of my Backup Configuration XML also does not change the situation.
When changing in the menu of acme alway occurs the following error:

An API exception occured:
/usr/local/opnsense/mvc/app/controllers/OPNsense/Base/ApiControllerBase.php:159: Error at /usr/local/opnsense/mvc/app/models/OPNsense/HAProxy/HAProxy.php:147 - Required parameter $expression follows optional parameter $description (errno=8192)

Perhaps all is just a problem of those php scripts and my certificates are still there? When I go to one of my website it shows the correct certificate. So if it is not cached in some place it seems still working and delivering.

Also when I go to haproxy menu occurs the same error. Rest of menus seem to work.

On commandline it look like I have the latest haproxy (which I can receive here - haproxy24-2.4.17) But in the normal FreeBSD repo there is yet a haproxy24-2.4.18 available... perhaps this is a reason?

Any help apreciated. Thanks

2

22.1 Legacy Series / Unbound does not start anymore after update to 22.1.5

« on: April 12, 2022, 06:55:45 pm »

Hi,

I updated to 22.1.5 and I am running on FreeBSD 13.0-STABLE / LibreSSL 3.3.6
After turning back from update, unbound was no longer running and could not be started.

• It seems not to be a problem of the blacklists (if I uncheck the "activate" button there it has no effect).
• A reinstall of unbound did not change
• All of my host configurations seem to be los in the web ui (do not know how it is called in english, but in german it reads "Überbrückung"
• On commandline it says "unbound-checkconf /var/unbound/unbound.conf
  unbound-checkconf: no errors in /var/unbound/unbound.conf"
• The same does "configctl unbound check"
• In the /conf/backup/config/* Files there still exists my Hostname overrides I defined earlier in unbound
• A reinstall of older backups (just the unbound part) did not change anything

Is there a way to clear all unbound configuration and reinstall from the backup that part? A way to deinstall unbound and make a fresh reinstall? Seems that unbound is somehow fundamental to opnsense. But I do not know how to go on.
I changed my config so the clients take the DNS from another server and DHCP propagates that Server. So now it works, but I am unhappy with that solution.

In which log file should I expect more hints? The web ui Log just says:
2022-04-12T18:29:53   Notice   unbound   daemonize unbound dhcpd watcher.   

In the /var/log/system/latest.log there is just that line a bit strange, but apart that nothing:
<11>1 2022-04-12T18:30:04+02:00 OPNsense.compeiler.de opnsense 66185 - [meta sequenceId="7"] /status_services.php: warning: ignoring missing default tunable request: debug.pfftpproxy

But a restart makes something but does not lead to a running service. But also does not show any error.

Thanks for any hint...