First post.
I installed the plugin os-cloudflared (v1.1_1) from the OPNsense repository. In the Cloudflare dashboard the version of the tunnel is 2026.2.0, which is no longer supported or safe to use thanks to the compromised eMudhra certificates.
https://blog.cloudflare.com/emudhra-certificate-compromise
I'm new to the OPNsense ecosystem and after reading this post I'm not sure who to contact. This plugin should be removed or updated. Do I email the maintainer or is this maintained by the (awesome) OPNsense team?
Cloudflare Tunnel integration
Integrates the Cloudflare Tunnel daemon (cloudflared) into OPNsense,
allowing self-hosted services to be exposed through Cloudflare Zero Trust
without requiring inbound firewall rules or a public IP address.
WWW: https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/
Inspired by original work by Alan Martines <alancpmartines@hotmail.com>.
Maintainer: rick+github@insanityinside.net
I installed the plugin os-cloudflared (v1.1_1) from the OPNsense repository. In the Cloudflare dashboard the version of the tunnel is 2026.2.0, which is no longer supported or safe to use thanks to the compromised eMudhra certificates.
https://blog.cloudflare.com/emudhra-certificate-compromise
QuoteCloudflare Tunnel (cloudflared) Action the customer should take: Upgrade to 2026.10.2. For container deployments, update and redeploy the fixed image
I'm new to the OPNsense ecosystem and after reading this post I'm not sure who to contact. This plugin should be removed or updated. Do I email the maintainer or is this maintained by the (awesome) OPNsense team?
Cloudflare Tunnel integration
Integrates the Cloudflare Tunnel daemon (cloudflared) into OPNsense,
allowing self-hosted services to be exposed through Cloudflare Zero Trust
without requiring inbound firewall rules or a public IP address.
WWW: https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/
Inspired by original work by Alan Martines <alancpmartines@hotmail.com>.
Maintainer: rick+github@insanityinside.net
"