Problem with Captive Portal

[andreadepau]

Hi,
i've search in the Forum bat i didn't found a solution for my problem.

The first time that i set up the Captive Portal with the local database, the Portal it worked but I couldn't log in, return authentication failed. Than, I have setup again, also with Voucher, but now the portal is no longer displayed and the session time out. Can you help me to solve this issue?

I've tested this configuration in a VM on VirtualBox, and also on the Miniserver SMALL3 HW.

Thank you

[tong2x]

setup detailes and config?
one lan? ips etc.

without captive evrything is ok?

[andreadepau]

Thanks for reply.
Now i cannot check because i'm in vacation. Next monday i can send you all information. But yes, without Captive Portal, all works great!

[tong2x]

it may be a DNS issue or a firewall rule issue
it would be clear if more info such as settings and screen shoots of rules

just post here when available, have a nice vacation

[andreadepau]

Hi, here some information:

OPNSENSE LAB
LAN em1 192.168.56.254/24
WAN em0 DHCP: 10.0.2.15/24
VLAN12 em2 192.168.112.254/24

Windows 10 VM
LAN DHCP on VLAN12 (em2)

Attached you can see the rules set on the VLAN12.

Without Captive Portal i can browse all sites, and when i create new one CP authentication failed.

[andreadepau]

Ok, i've troubleshoot the problem and found that:

1. disabled captive portal
2. removed captiveportal sqlite database
3. enable captive portal

this create a new one captive portal DB with the zone number structure.
Now portal works great, but not for HTTPS sites.

There is a way to redirect the https traffics through captive portal?
Otherwise, there is a way to open the captive portal in other Windows, then forward to another page in the browser?

Thank you very much.

[tong2x]

generally speaking no

there are tutorials with activating https, but most https will break...
since the point being that, SSL is supposed to ensure security of the link
and that it will not be intercepted...
captive portal basically "intercept" connection, hence https breaks.
by forcing a different https cert it will show the login but may not be able to pass to the correct server/site

the question is... could it be possible to always force a redirect to non https
even if original link is https