Topics

1

21.7 Legacy Series / no-sslv3/no-tlsv1x are ignored for bind '127.0.0.1:443'

« on: August 23, 2021, 12:42:39 am »

Hi,
I am running OPNSense 21.7.1 and using haproxy for SSL Offloading
After several upgrades to catch up to the latest version, I encounter the following problem:
- https public service under haproxy seems not to function
- I get the following error message in haproxy when testing the syntax

[WARNING] 234/013128 (31345) : Proxy 'https_in': no-sslv3/no-tlsv1x are ignored for bind '127.0.0.1:443' at [/usr/local/etc/haproxy.conf.staging:58]. Use only 'ssl-min-ver' and 'ssl-max-ver' to fix.
Warnings were found.
Configuration file is valid

Clearing up the no-sslv3/no-tlsv1x in the GUI seems not to solve the issue, the error message remains.
Any help/hints are appreicated.

2

17.7 Legacy Series / Let's Encrypt certificate reissue error - outdated ACME

« on: January 08, 2018, 09:06:23 pm »

Hello everyone,
Having a problem with Let's Encrypt - we cannot renew certificates with Let's Encrypt client due to the following error:

"detail": "Provided agreement URL [https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf]    does not match current agreement URL [https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf]",

response='{"type":"urn:acme:error:malformed","detail":"Provided agreement URL [https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf] does not match current agreement URL [https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf]","status": 400}'



Found this notice: https://github.com/Neilpang/acme.sh/issues/1112

Any help appreciated.