Topics

1

Tutorials and FAQs / how does config.xml file generate?

« on: September 07, 2018, 02:37:51 pm »

hi all, wanted to know how does config.xml file generate ?

in this address : /conf/config.xml

which command or file generates config.xml file ?
thanks

2

18.7 Legacy Series / disabling list of ciphers supported by sshd

« on: September 05, 2018, 05:43:16 am »

hi, how can i disable and enable some of the ciphers that are supported by sshd ?
i edit this file:
vim /etc/ssh/sshd_config

and then restart the sshd
service openssh onerestart

and check for supported list of ciphers :
sshd -T | grep ciphers

but nothing changes , how i can change list of supported ciphers?
i asked it somewhere else in this forum too , im in a very hurry , can anyone help me ?

3

Tutorials and FAQs / disabling list of ciphers supported by sshd

« on: September 04, 2018, 12:02:41 pm »

hi, how can i disable and enable some of the ciphers that are supported by sshd ?
i edit this file:
vim /etc/ssh/sshd_config

and then restart the sshd
service openssh onerestart

and check for supported list of ciphers :
sshd -T | grep ciphers

but nothing changes , how i can change list of supported ciphers?

4

18.7 Legacy Series / LDAP connection using SSL-Encryption problem

« on: August 09, 2018, 06:54:27 am »

Respected OPNSense team,
there is a problem when i use LDAP with SSL-Encryption feature.

according to the following picture :
when i try to choose SSL-Encryption from  System -> Servers -> Transport


and after adding the certificate that is generated on the LDAP Server to the authorities part (System -> Trust -> Authorities); after adding user from the ldap directory and giving it the effective privileges, i tried to login , the first time i tried it work correctly but after restarting configd and login from dashboard i can't login anymore. when i check the logging section i get the following error:



i tried running list_ciphers.py file and there isn't any problem with it:


i also checked the ssl connection with LDAP server using openssl, and there isn't any problem with it either:




i don't know what is wrong , may someone help me. it's very important for me, i'm working in an enterprise-level company and its necessary to make connection using SSL-Encryption.
thanks