Plugin Update or Removal

Started by MisterGlass, Today at 01:29:40 AM

Previous topic - Next topic
First post.

I installed the plugin os-cloudflared (v1.1_1) from the OPNsense repository. In the Cloudflare dashboard the version of the tunnel is 2026.2.0, which is no longer supported or safe to use thanks to the compromised eMudhra certificates.


https://blog.cloudflare.com/emudhra-certificate-compromise


QuoteCloudflare Tunnel (cloudflared)   Action the customer should take: Upgrade to 2026.10.2. For container deployments, update and redeploy the fixed image

I'm new to the OPNsense ecosystem and after reading this post I'm not sure who to contact. This plugin should be removed or updated. Do I email the maintainer or is this maintained by the (awesome) OPNsense team?


Cloudflare Tunnel integration
Integrates the Cloudflare Tunnel daemon (cloudflared) into OPNsense,
allowing self-hosted services to be exposed through Cloudflare Zero Trust
without requiring inbound firewall rules or a public IP address.

WWW: https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/
Inspired by original work by Alan Martines <alancpmartines@hotmail.com>.
Maintainer: rick+github@insanityinside.net

Today at 06:09:02 AM #1 Last Edit: Today at 06:14:02 AM by patient0
Quote from: MisterGlass on Today at 01:29:40 AMMaintainer: rick+github@insanityinside.net
Since it's a community plugin, contacting the maintainer by the email address provided is the sensible approach.

On second thought: maybe open a issue on Github for it (https://github.com/opnsense/plugins), I see other changes were made by the OPNsense team.

Or even better, provide a pull request.
Deciso DEC740