Upgrade, lost webgui and MinProtocol (DTLS)

[GreenMatter]

After upgrading to 26.7 I lost an access to webgui (https) and pkg stopped working correctly. I think I've found reason for this issue but not a root cause. Anyway, as long as in System - Trust - Settings - MinProtocol (DTLS) is set to "DTLSv1.1" webgui and pkg doesn't work... After changing it (had to switch webgui to http) to None or DTLSv1 all works again!

[franco]

In general DTLS is for UDP, not HTTPS.  Might also be the KTLS thing, but the behaviour seems to be at least two different scenarios: one for server responses and one for client requests.


Cheers,
Franco

[LOTRouter]

I also lost WEB GUI access on upgrade, or at least it was intermittently inaccesable for long periods of time.  This fixed it for me:

https://forum.opnsense.org/index.php?topic=52409.0

[Dirk.M]

Hi..
I lost also die WEB Gui, but only via external access to the interface.
I can access the GUI without any issues via WireGuard.
Before the upgrade, accessing it via the Sense's external hostname also worked.
External login is still possible. However, the menu is jumbled, and most menu items are empty.
The character set, for instance, is also different compared to the VPN login.

[Dirk.M]

Doing this and clearing the cache fixes the problem for me, too.

Quote from: mrpink on July 15, 2026, 11:51:42 PM

Code Select Expand

# sysctl kern.ipc.tls.enable=0
# configctl webgui restart

[GreenMatter]

I know DTLS applies to UDP but this settings affects openssl (upgraded) package as pkg also didn't work properly:

Code Select Expand

# pkg update
Updating OPNsense repository catalogue...
pkg: An error occurred while fetching package: No error
pkg: An error occurred while fetching package: No error
repository OPNsense has no meta file, using default settings
pkg: An error occurred while fetching package: No error
pkg: An error occurred while fetching package: No error
pkg: An error occurred while fetching package: No error
pkg: An error occurred while fetching package: No error
Unable to update repository OPNsense
Error updating repositories!
And once I set DTLS to v1 all came back to normal....

[franco]

Without more debug output this won't resolve easily so let's try this when it's not working:

# fetch -vv https://pkg.opnsense.org/FreeBSD:15:amd64/snapshots/latest/data.pkg
# curl -o data.pkg -vv https://pkg.opnsense.org/FreeBSD:15:amd64/snapshots/latest/data.pkg


Cheers,
Franco