Topics

1

23.7 Legacy Series / system -> settings -> administration save fails

« on: March 21, 2024, 07:27:54 pm »

opnsense 23.7.12_5

when into system -> settings -> admin   
just wanted to enable password protection on console menu  but when I hit save I get the error

"the following input errors were detected
    Certificate XXXX is not intended for server use "

and my change did not save. 

now, my browser says the cert is valid.  I did create it with my own internal CA

what does "not intended for server use " even mean?  note this is for opnsense not for  openvpn
and why does it work but I can't save any changes on this page?

I would like to solve this before tring to upgrade to 24.x

thanks,
GF

2

24.1 Legacy Series / unable to upgrade from 23.7.12_5 to 24.1

« on: March 19, 2024, 10:01:08 pm »

I attempted to upgrade from 23.7.12_5  to 24.1 but the upgrade crashes with an error with duckdb ??

I have always kept my firewall up to date so I'm not sure what this means.  How can i fix this ? What did I do wrong to get this error? 

I mean I can go to duckidb.org but I'm not sure how its being used with opnsense or how I would go about trying to import it into a new db since I'm guessing the new db version is part of the update so does not exist on my  23.7.12_5.   I'm not sure how to attack this problem.

any thoughts would be apricated!

GF

-----------   error message  -------------------

***GOT REQUEST TO UPGRADE***
Currently running OPNsense 23.7.12_5 at Tue Mar 19 16:43:04 EDT 2024
Fetching packages-24.1-amd64.tar: ... done
Fetching base-24.1-amd64.txz: ...................... done
Fetching kernel-24.1-amd64.txz: .......... done
Extracting packages-24.1-amd64.tar... done
Extracting base-24.1-amd64.txz... done
Extracting kernel-24.1-amd64.txz... done
Please reboot.
>>> Invoking upgrade script 'squid-plugin.php'
Squid web proxy is not active. Not installing replacement plugin.
>>> Invoking upgrade script 'unbound-duckdb.py'
Traceback (most recent call last):
  File "/usr/local/opnsense/site-python/duckdb_helper.py", line 65, in __enter__
    self.connection = duckdb.connect(database=self._path, read_only=self._read_only)
duckdb.IOException: IO Error: Trying to read a database file with version number 39, but we can only read version 51.
The database file was created with DuckDB version v0.6.0 or v0.6.1.

The storage of DuckDB is not yet stable; newer versions of DuckDB cannot read old database files and vice versa.
The storage will be stabilized when version 1.0 releases.

For now, we recommend that you load the database file in a supported version of DuckDB, and use the EXPORT DATABASE command followed by IMPORT DATABASE on the current version of DuckDB.

See the storage page for more information: https://duckdb.org/internals/storage

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/local/etc/rc.syshook.d/upgrade/20-unbound-duckdb.py", line 41, in <module>
    if export_database('/var/unbound/data/unbound.duckdb', '/var/cache/unbound.duckdb', 'unbound', 'unbound'):
  File "/usr/local/opnsense/site-python/duckdb_helper.py", line 147, in export_database
    with DbConnection(source, read_only=True) as db:
  File "/usr/local/opnsense/site-python/duckdb_helper.py", line 75, in __enter__
    raise StorageVersionException(str(e))
duckdb_helper.StorageVersionException: IO Error: Trying to read a database file with version number 39, but we can only read version 51.
The database file was created with DuckDB version v0.6.0 or v0.6.1.

The storage of DuckDB is not yet stable; newer versions of DuckDB cannot read old database files and vice versa.
The storage will be stabilized when version 1.0 releases.

For now, we recommend that you load the database file in a supported version of DuckDB, and use the EXPORT DATABASE command followed by IMPORT DATABASE on the current version of DuckDB.

See the storage page for more information: https://duckdb.org/internals/storage
>>> Error in upgrade script '20-unbound-duckdb.py'
***DONE***


-----------------------end message -------------------------------

3

21.1 Legacy Series / vpn works but no dns

« on: May 06, 2021, 02:56:00 am »

I am using OPNsense 20.7.8-amd64

I am trying to get vpn to work and found the following
https://homenetworkguy.com/how-to/configure-openvpn-opnsense/

i am trying to set up vpn for my iphone and ipad. 

when i connect to the vpn, i can see i'm on the 10.10.0.x network which is the ipv4 tunnel network ( as described in the doc above )

I can get to my internal ip addresses  ( 192.168.x.x ) but I can't get to anything internal ( i have unbound dns running on opnsense )  via dns. 
I can see in the vpn log on the iphone it says dns server 192.168.10.1 was added its just not working. I CAN get to the IP address (and thus to the opnssense gui ) just not via the dns name.

i'm not sure what logs/config info would be helpful, but i'm happy to provide anything that would be helpful. Not sure what  i did wrong.

thanks for your time,
John