Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - rdunkle84

#2
25.7, 25.10 Series / prefix delegation - ipv6 - kea
October 08, 2025, 05:39:45 PM
I switched to Kea and using dhcpv6.  I noticed that Android 16 devices started to work with and use ipv6.  I found that each device was requesting a dedicated prefix.  Appears strange and wasteful.   I looked into this and found an article:
android-developers.googleblog.com/2025/09/simplifying-advanced-networking-with.html

I am using OPNsense 25.7.4 and PFSense. The OPNsense has some sort of issue with the dhcpv6, prefix delegation, and routing.  I think the routes are not being created for prefix delegation.  I found that PFsense appears to work with the dhcpv6, and prefix delegation without a problem.
#3
24.7.2
Clean install not upgrade.
I see an error on console:
HTTPS: Could not open file or uri for loading certificate from /var/etc/cert.pem
00206149AD9D0000:error:16000069:STORE routines:ossl_store_get0_loader_int:unregistered scheme:/usr/src/crypto/openssl/crypto/store/store_register.c:237:scheme=file
00206149AD9D0000:error:80000002:system library:file_open:No such file or directory:/usr/src/crypto/openssl/providers/implementations/storemgmt/file_store.c:267:calling stat(/var/etc/cert.pem)
Unable to load certificate
#4
Quote from: jcook on May 23, 2024, 09:15:00 PM
Quote from: rdunkle84 on February 01, 2024, 05:29:21 PM
OPNsense 24.1 aarch64 ....  is working well on Orange Pi 5 Plus.

Would you mind sharing your build or the steps you took? I'm trying to get it working on my OPI5+ as well. Thank you.
The first step is to change the firmware of the OPI5+ to use EDK2 firmware.
https://github.com/edk2-porting/edk2-rk3588
If you do that then you can use the OPNsense images.
#5
I noticed that when creating the cloudflare api token, Acme required:
Zone Resources set: Include | All zones.   This appears to be the problem.
To sum it up:
Zone | DNS | Edit
Zone Resources | Include | All Zones
Client IP (not using this field)
TTL | set a valid date range
This appears to work OK.
#6
OPNsense 24.1 aarch64 ....  is working well on Orange Pi 5 Plus.
#7
Update to 24.1 r1 went fine.  Everything seems to be working normally.
#8
This is really good work!  I am now running on orange pi 5 plus.  There were no problems at all.