Messages

No, they don't ;)

Google and Mozilla Authorities revoked their CA certificate due to conflict with one of the investors owned StartSSL. StartSSL is trying to solve this asap, but it takes them at least half year in my opinion to create new CA.

So I'll wait for fix in acme implementation better :)

Best regards,

Martin.

Ok, so I found a "bug" too... Name of the certificate cannot contain "-" sign (ie. something-strange.domain.com).
Saddly, I do have - in the name. Can You please make something with this? :)

Thanks in advance.

Bests...

Martin.

Dears,

I've just moved my installation to 17.1 (went smooth and easy, thx) to have this acme.sh script and to request Let's Encrypt cert for ssl.

But how to configure this script and how to use it? I've created some config, but I don't know if it is valid. Logs are saying, that issuing new cert was successful, but I do not see this cert nowhere...

Little help? ;) Thx in advance.

Best regards,

Martin.

Hello :)

I would like to ask You, Team, if You be so kind to port a python library called py27-certbot into OpnSense.

This library and tool comes from EFF organisation, and is used for managing certificates from Let's Encrypt organisation, which can be used for HTTPS communication.

EFF's Certbot is available in ports for FreeBSD: https://certbot.eff.org/#freebsd-other
but is not available within OpnSense (or I cannot install them with simple pkg install py27-certbot).

Thank You in advance for any help with this subject :)

Best regards,

Martin.

Dears,

is there any comprehensive documentation of the API of OpnSense?

I would like to make some automation integrated with our billing system and in case of no payment (for example) I want to limit speed of the client's interface.
In online documentation is only an example how to upgrade firmware, but this is to small information of available commands/methods, and so on...

Thanks in advance for Your help :)

(2Mod: if this question should be placed on other forums, please feel free to move it appropriately).

Have You tried with defined alias for hosts list?

Thx :)

Problem solved by clearing all site settings, cookies and offline files from web browser...

Hi.

After upgrade from earlier version (if I remember correctly it was 16.1.5) to recent 16.1.16 my dashboard gets empty. When I click on "Add widget" I see all items, but when I click on choosen widget to be added, it dissapears, orange button "save" highlights, but nothing shows up on the dashboard.

What can be done to fix it? Cookies?

Thx in advance for any hint...

Indeed I've ommited trailing slash. Now I can see my script in cron and have tested it working from cron :) Thanks a lot!

BTW: why it is not supported settings cron action every n amount of time? In linux we can write like this:

Code Select Expand


*/5 * * * * somefancyscript.sh

and it will run every 5 min...
Ok, You're working on refactoring cron implementation, but will this be supported in new implementation? :)

Ok, my script itself works perfectly, but I can't do the cron magic. I don't have such url: 192.168.x.x/ui/cron available - when I enter this manualy, I land on system status page.
I've used a standard shell to access crontab and will see if it works.

Thx for Your help :) Case is solved.

Wow, thx for this :)

I will test it and leave a note if it works for me :)

Best regards.

Hi :)

Is it possible to create automatic occured backup of OpnSense configuration to SCP/SFTP server?
Currently, there is only automated backup onto Google Drive, which is not best way in my opinion ;)

Solution can be triggered from OpnSense itself (even from internal crontab), but also from external server by downloading configuration XML using some fancy script ;)

Can I use for this an API key generated for special user? How?

Thx for any hint how to do this.

Best regards!

Ok, looks that the problem is solved :) CPU is cold as for now and I think it should stay in this state.

Best regards!

Adding second core and reboot as for now make the situation better. Will see, what happens, when states table grows up a little. Now is 3% and CPU is varying around 10-20%.
Further reports will follow after next business hours ;)

Yes, I'm sure ESXi is not overloaded - it serves only two virtual machines - one is this router and second is a Linux for VPN.
Prior version was 15.7 series (but I don't know exactly which build).

My IDS/IPS configuration doesn't change between 15.7 and 16.1 :/ And there is huge difference in CPU usage. I will perform a small change right now: I will add 1 core to the vCPU for this VM and restart the router. Then I will check, if there is any difference and report this to You in this topic.

Cheers!