Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - sensorback

#1
Hi Forum,
I'm running 18.1.6/18.1.7 on an APU2C4 with three Intel NICs. It worked for about two weeks. Then I did some tweaking, and also moved the WAN port to the other side of the box. Now it happens, that you configure, before you physically move the cable to the other port, or the other way around - however: the WAN cable (coming from an LTE modem) is attached to an unconfigired or a LAN port. When I move the WAN cable to the correct port again, i don't get online. Pings to 8.8.8.8, browsing on a client, checking for updates in the OPNSense GUI, nothing works. The steps to repair it are different. Stopping the whole infrastructure sometimes works, saving the WAN gateway, and just messing around a bit, reinstalling OPNSense, sometimes one of this steps works, sometimes not. Today it just worked after waiting 16 hours doing NOTHING.

At least after doing the OPNSense setup with all defaults, so that I can be sure nothing is messed up, one would think it's done - but no, not always.

There is only the LTE modem (Netgear LB1110) and my PC attached (i leave out all other infrastructure until this is solved). Anybody else with this issue?
#2
I also can confirm the issue: I did a fresh 18.1.6 install yesterday and upgraded to 18.1.7, after that installed the Let's Encrypt plugin and couldn't select a Validation Method.

If you are familiar with a browsers developer tools, you can workaround it like this until there is a fix available:

  • Open the Validation Method list
  • Inspect the edit button of the validation method entry with the dev tools. The button tag has an attribute data-row-id, 36 alphanumeric characters with dashes. That's the ID, copy it.
  • Create a new certificate, in the form inspect the Validation Method dropdown with the dev tools. The dropdown text or button will be selected in the inspector, but somewhere next to it there is the <select id="certificate.validationMethod" ...> tag.
  • Edit the <select> tag, and insert an option tag like this: <option value="PASTE_YOUR_ID_HERE" selected="selected"></option>. The value attribute of the option tag needs to be the 36 character ID you copied just before from the validation methods list. and be sure to include the selected="selected" attribute in the <option> tag, else it won't be sent with the form as nothing would be selected.
  • Complete the rest of the form and save it.

Worked for me. As there is no "Validation Method" column, and the options are also not displayed in the edit form, you can't verify in the GUI if it was really set. But my certificate was issued. You could also download a OPNSense configuration backup, as it's just an XML you can open it in a text editor and search for <validationMethod>, there you see the 36 character long ID.