Topics

The road map for 17.7 is still missing. Can you add it or will 17.7 be only bug fixing and closing tickets (there are still lots of feature requests open on GitHub)?

Hi, I made a more or less working version of a plugin, that allows routing protocols like OSPF in OPNsense.
https://github.com/opnsense/plugins/pull/88

Quagga supports a lot more protocols but if you like to add another than OSPF like BGPv4 or RIP or are willing to help it could be even better.

Because it is a work in progress, it may not work on your device (the config still includes hardcoded interfaces because quagga generates them every time you copy the running config to the startup config and did not try if I can remove them securely.

Kind regards

Fabian

Dear OPNsense users,

on a pull request we got, we found out, that dynamic DNS is having TLS certificate checks disables on most services.
I have tried some of them if the certificate of the service is trusted*.
First of all the good news - most of the tested services are trusted. But there is a downside: Some services experience issues when you use LibreSSL. The Bug is already fixed in LibreSSL but it did not went upstream yet as a production release.

I have enabled the certificate checks again on some services and this will go into the beta series of 17.7 and will be finally released then. In mean time we would be glad to hear some feedback if the patch is working. You may install it on your device via

Code Select Expand

opnsense-patch f0f65fc

Find the full commit here to see which services are affected:
https://github.com/opnsense/core/commit/f0f65fc9ad1d7750bf1cb50d470accab93a9afd5

Stay safe

Fabian


* tried to use cURL on the command line which should use the same trust store as the scripts of OPNsense.
If you want to test the connection by yourself, run

Code Select Expand

curl -v "https://example.com"
-v is for verbose, so the shell will show the result of the HTTPS handshake.

Edit: removed dot from command

As we are on a new release, the road map for 17.7 should be created.

Hi all,

Tutorial is on my own website: https://fabian-franz.eu/icaprb/opnsense/2016/11/23/install-icaprb-on-opnsense.html

It can be used with the web proxy server if you want to add some custom features for scanning or content manipulation.

Kind regards

Fabian

Hallo Miteinander,

ich werde die nächste Zeit nicht mehr so viel an der deutschen Übersetzungsdatei arbeiten können, wodurch sich der Fortschritt verlangsamen wird. Derzeit ist der Stand übrigens 89%.

Mit freundlichen Grüßen

Fabian

There is a new attack against 64 bit ciphers: https://sweet32.info/

Please be careful when using an affected cipher especially when using it with vpn.


fabian

   
• migrate to PHP 7 and Phalcon 3

Hi,

there is an issue with the Japanese and Chinese translation. The way to fix it: Install an additional font.
If you are using it on a system where the font is not installed, the page may look empty.

The question is, how this issue should be fixed. Does anyone know an open source font which can be used or have another idea?

Kind regards,

Fabian

does anyone have a hint why my patch is not working?
https://github.com/opnsense/core/compare/master...fabianfrz:icap_support?expand=1

The generated configuration is valid but it will produce an 403 error on every request.
Authentication is disabled.

Regards

Fabian

Hi,

I just pushed my first classes of my API client.
https://github.com/fabianfrz/OPNsense_client_lib

Kind regards

fabian

Hello everyone,

I am Fabian (the person who started the german translation) and I want to ask you, if you would like to help the project to be translated into your native language.

You can see the translation files where people are working on here: https://github.com/opnsense/core/tree/master/lang

A translation file which has more than 30% of the strings translated will usually be included in the release.

Kind regards,

Fabian