Messages

just played a bit with telegraf. the metrics are similar. no real gain here. I still miss vpn and PF data for now

Didn't tried telegraf yet. But I will tomorrow
I'll probably make another one

Hi guys,

I just uploaded a grafana dashboard for OPNsense
https://grafana.com/dashboards/9291

Hope it helps you all. we still miss DHCP and VPN stats - hope to have those exported too.

can you show the logs

Hi,

I have several issues after the update.
1. the PPPoE interface automatically renames as "No-Ip ddns"  :-\ Same behavior if I change the description on the Point to Point Definition
2. It seems that Unbound DNS refuses to resolve secure requests. to make it work I'm forced to use the forwarding mode.



Any clue if those 2 were touched by the code change in the last patch?

thanks again :)

Thanks for answering.
root@***:~ # pkg version getdns | grep getdns
getdns-1.4.2
reconfigured all again and seems fine.
It's strange that DNS service dies from time to time - it will be verry helpful to have watchdog as plugin

thanks

[[Sat Jun 16 19:27:10 EEST 2018] new-authz error: {"type":"urn:acme:error:malformed","detail":"Error creating new authz :: DNS name does not have enough labels","status": 400}]

Hi all,

I'm trying to get a new cert for web-https and i'm pretty sure i miss somethig. if you guys see what i miss please let me know.
acme log looks like this:

root@OptimusPrime:~ # tail -f /var/log/acme.sh.log
[Sat Jun 16 19:22:52 EEST 2018] _ret='0'
[Sat Jun 16 19:22:52 EEST 2018] code='400'
[Sat Jun 16 19:22:52 EEST 2018] The new-authz request is ok.
[Sat Jun 16 19:22:52 EEST 2018] new-authz error: {"type":"urn:acme:error:malformed","detail":"Error creating new authz :: DNS name does not have enough labels","status": 400}
[Sat Jun 16 19:22:52 EEST 2018] pid
[Sat Jun 16 19:22:52 EEST 2018] No need to restore nginx, skip.
[Sat Jun 16 19:22:52 EEST 2018] _clearupdns
[Sat Jun 16 19:22:52 EEST 2018] skip dns.
[Sat Jun 16 19:22:52 EEST 2018] _on_issue_err
[Sat Jun 16 19:22:52 EEST 2018] Please check log file for more details: /var/log/acme.sh.log
[Sat Jun 16 19:27:05 EEST 2018] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
[Sat Jun 16 19:27:05 EEST 2018] DOMAIN_PATH='/var/etc/acme-client/home/FirewallCertACME_ecc'
[Sat Jun 16 19:27:05 EEST 2018] Using ACME_DIRECTORY: https://acme-v01.api.letsencrypt.org/directory
[Sat Jun 16 19:27:05 EEST 2018] _init api for server: https://acme-v01.api.letsencrypt.org/directory
[Sat Jun 16 19:27:05 EEST 2018] GET
[Sat Jun 16 19:27:05 EEST 2018] url='https://acme-v01.api.letsencrypt.org/directory'
[Sat Jun 16 19:27:05 EEST 2018] timeout=
[Sat Jun 16 19:27:05 EEST 2018] _CURL='curl -L --silent --dump-header /var/etc/acme-client/home/http.header  -g '
[Sat Jun 16 19:27:06 EEST 2018] ret='0'
[Sat Jun 16 19:27:06 EEST 2018] ACME_KEY_CHANGE='https://acme-v01.api.letsencrypt.org/acme/key-change'
[Sat Jun 16 19:27:06 EEST 2018] ACME_NEW_AUTHZ='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Sat Jun 16 19:27:06 EEST 2018] ACME_NEW_ORDER='https://acme-v01.api.letsencrypt.org/acme/new-cert'
[Sat Jun 16 19:27:06 EEST 2018] ACME_NEW_ACCOUNT='https://acme-v01.api.letsencrypt.org/acme/new-reg'
[Sat Jun 16 19:27:06 EEST 2018] ACME_REVOKE_CERT='https://acme-v01.api.letsencrypt.org/acme/revoke-cert'
[Sat Jun 16 19:27:06 EEST 2018] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf'
[Sat Jun 16 19:27:06 EEST 2018] ACME_NEW_NONCE
[Sat Jun 16 19:27:06 EEST 2018] ACME_VERSION
[Sat Jun 16 19:27:06 EEST 2018] Le_NextRenewTime
[Sat Jun 16 19:27:06 EEST 2018] _on_before_issue
[Sat Jun 16 19:27:06 EEST 2018] _chk_main_domain='FirewallCertACME'
[Sat Jun 16 19:27:06 EEST 2018] _chk_alt_domains='nikkon.go.ro'
[Sat Jun 16 19:27:06 EEST 2018] Le_LocalAddress
[Sat Jun 16 19:27:06 EEST 2018] d='FirewallCertACME'
[Sat Jun 16 19:27:06 EEST 2018] Check for domain='FirewallCertACME'
[Sat Jun 16 19:27:06 EEST 2018] _currentRoot='/var/etc/acme-client/challenges'
[Sat Jun 16 19:27:06 EEST 2018] d='nikkon.go.ro'
[Sat Jun 16 19:27:06 EEST 2018] Check for domain='nikkon.go.ro'
[Sat Jun 16 19:27:06 EEST 2018] _currentRoot='/var/etc/acme-client/challenges'
[Sat Jun 16 19:27:06 EEST 2018] d
[Sat Jun 16 19:27:06 EEST 2018] _saved_account_key_hash is not changed, skip register account.
[Sat Jun 16 19:27:06 EEST 2018] Read key length:ec-256
[Sat Jun 16 19:27:06 EEST 2018] _createcsr
[Sat Jun 16 19:27:06 EEST 2018] Multi domain='DNS:FirewallCertACME,DNS:nikkon.go.ro'
[Sat Jun 16 19:27:06 EEST 2018] Getting domain auth token for each domain
[Sat Jun 16 19:27:06 EEST 2018] d='FirewallCertACME'
[Sat Jun 16 19:27:06 EEST 2018] Getting webroot for domain='FirewallCertACME'
[Sat Jun 16 19:27:06 EEST 2018] _w='/var/etc/acme-client/challenges'
[Sat Jun 16 19:27:06 EEST 2018] _currentRoot='/var/etc/acme-client/challenges'
[Sat Jun 16 19:27:06 EEST 2018] Getting new-authz for domain='FirewallCertACME'
[Sat Jun 16 19:27:06 EEST 2018] _init api for server: https://acme-v01.api.letsencrypt.org/directory
[Sat Jun 16 19:27:06 EEST 2018] Try new-authz for the 0 time.
[Sat Jun 16 19:27:06 EEST 2018] url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Sat Jun 16 19:27:06 EEST 2018] payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "FirewallCertACME"}}'
[Sat Jun 16 19:27:06 EEST 2018] RSA key
[Sat Jun 16 19:27:08 EEST 2018] GET
[Sat Jun 16 19:27:08 EEST 2018] url='https://acme-v01.api.letsencrypt.org/directory'
[Sat Jun 16 19:27:08 EEST 2018] timeout=
[Sat Jun 16 19:27:08 EEST 2018] _CURL='curl -L --silent --dump-header /var/etc/acme-client/home/http.header  -g '
[Sat Jun 16 19:27:08 EEST 2018] ret='0'
[Sat Jun 16 19:27:08 EEST 2018] POST
[Sat Jun 16 19:27:08 EEST 2018] _post_url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Sat Jun 16 19:27:08 EEST 2018] _CURL='curl -L --silent --dump-header /var/etc/acme-client/home/http.header  -g '
[Sat Jun 16 19:27:10 EEST 2018] _ret='0'
[Sat Jun 16 19:27:10 EEST 2018] code='400'
[Sat Jun 16 19:27:10 EEST 2018] The new-authz request is ok.
[Sat Jun 16 19:27:10 EEST 2018] new-authz error: {"type":"urn:acme:error:malformed","detail":"Error creating new authz :: DNS name does not have enough labels","status": 400}
[Sat Jun 16 19:27:10 EEST 2018] pid
[Sat Jun 16 19:27:10 EEST 2018] No need to restore nginx, skip.
[Sat Jun 16 19:27:10 EEST 2018] _clearupdns
[Sat Jun 16 19:27:10 EEST 2018] skip dns.
[Sat Jun 16 19:27:10 EEST 2018] _on_issue_err
[Sat Jun 16 19:27:10 EEST 2018] Please check log file for more details: /var/log/acme.sh.log


Thanks in advance

Thank you for describing every step in details.
The only issue I have is that after doing everything the DNS service doesn't start anyone.

Thank you for sharing


Sent from my iPad using Tapatalk

can you detail how you do that? I'm also interested to push data from Suricata to influxdb
btw: does anyone use a "standard" grafana dashboard for opnsense already?

thx for answering. in this specific case was my home fw. so restart was not an issue. @ work...well it's a different story
fortunately after 3 restarts worked.

Several restarts solved it.
Thank you

Hi,
I have issues accessing the update & plugins section. look like is looping for 10 sec then it goes back to dashboard.
any clue?

+1 for the plugin :)