PAC-Support in Opnsense

[ruggerio]

Hi,

Github says a lot and nothing about when to expect the PAC and/or WPAD-implementation in Opnsense. Can you give some more information about?

Thanks!
Roger

[franco]

Hi Roger,

It's been in my review queue for too long. Sorry about this.

It has an implementational quirk that I wanted to look at in closer detail where it requires to inject a file into the web server directory but the file is not tracked and may end up "stuck" in the system. But I have a solution for this.

I can't promise 18.7 itself, but we will be able to lang this in an early 18.7.x.


Again, sorry!

Franco

[ruggerio]

Hi Franco,

Nevermind, this has just been a question for a helpful solution. I saw in Github, that you are still in discussion, this was why i was asking for a target date.

If i could help (but i am not a developer) let me know. Don't have to be sorry for this, we are glad about the opensource-solution, so what we can bring with us is patience!

Roger

[franco]

It was merged into the dev branch this evening. It'll be in the dev version of the upcoming 18.1.12 and 18.7-RC1.

If you find the opportunity to give it a spin that would be fantastic.


Cheers,
Franco

[ruggerio]

Hi Franco,

Back from short holiday, tried to update, but its noch possible. The download of 18.7.rc1 failed. Gonna try tomorrow?

Roger

[franco]

18.7.r1 is not out yet. And I meant 18.7.r2 and 18.1.12. Sorry for the mistake.


Cheers,
Franco

[ruggerio]

Ah, ok.

I did yesterday the update on the devel-version, but i did not find anything about pac-support. So i went back to production, as i could not Change any Content in the files of the proxy-configuration.

Roger

[franco]

Could be a browser cache issue. It'll sort itself out.


Cheers,
Franco

[ruggerio]

Hi Franco,

you're right. Cleaning cache made it. But where can i find settings for PAC-Support? Are they fixed, so that i just have to upload the PAC-File via SSH?

Thx,
Roger

[franco]

Hi Roger,

The code in the firmware mirrors is only updated for releases, so while the PAC code is in the core.git now, it's not in the firmware mirrors until 18.1.12 or 18.7.r2.

You can, however, now update your development version to the latest git code:

# opnsense-code core
# cd /usr/core
# make upgrade


Cheers,
Franco

[ruggerio]

done, will test.

How to switch back to production afterwards? Just set production in firmware-settings?

Thx,
Roger

[ruggerio]

1st results:

- Inserted rules, saved. After review, the rules aren't anymore there (descriptions), instead there are uuids
- it creates a wpad. how to handle a proxy.pac? the same?

seems to work, still testing. ssl outstanding.

[fabian]

wpad.dat is the PAC file. The WPAD requires that it has this name.

[ruggerio]

OK, i entered the wpad yesterday on my android, it downloaded the wpad.dat to my Handy.

[franco]

Yes, firmware settings production switches back to the official release.


Cheers,
Franco