Project

General

Profile

Actions
Copy link

Bug #16158

closed
DM

IPsec allows deleting P1/P2 entries with an assigned VTI

Bug #16158: IPsec allows deleting P1/P2 entries with an assigned VTI

Added by dylan mendez over 1 year ago. Updated over 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
IPsec
Target version:
2.8.0
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
24.11
Release Notes:
Default
Affected Version:
Affected Architecture:

Description

Input validation does not prevent user from deleting a P1/P2 with a VTI assigned.

Also the IPSec interface on the GUI assigns itself to a random interface, at least visually because the interface doesn't break or seem to notice.

Files

Download all files
clipboard-202504221835-hmb4v.png (22.6 KB) clipboard-202504221835-hmb4v.png dylan mendez, 04/23/2025 12:35 AM
clipboard-202504261027-vpcla.png (102 KB) clipboard-202504261027-vpcla.png Danilo Zrenjanin, 04/26/2025 08:27 AM
clipboard-202504261028-rrrqj.png (93.2 KB) clipboard-202504261028-rrrqj.png Danilo Zrenjanin, 04/26/2025 08:28 AM

DM Updated by dylan mendez over 1 year ago Actions
Copy link
 #1

  • Subject changed from 24.11 IPSec Input Validation Issue - IPSec allows deleting a P1/P2 with a VTI Interface Assigned to IPSec allows deleting a P1/P2 with a VTI Interface Assigned

DZ Updated by Danilo Zrenjanin over 1 year ago Actions
Copy link Download all files
 #2

I couldn't reproduce it on:

25.03-BETA (amd64)
built on Thu Apr 24 19:28:00 UTC 2025
FreeBSD 15.0-CURRENT

I am receiving a warning message regardless of whether I attempt to remove Phase 1 or Phase 2.


DZ Updated by Danilo Zrenjanin over 1 year ago Actions
Copy link
 #3

  • Status changed from New to Feedback

DZ Updated by Danilo Zrenjanin over 1 year ago Actions
Copy link
 #4

I am getting the same results on 24.11 pfSense Plus. Everything works as expected.

CC Updated by Christopher Cope over 1 year ago Actions
Copy link
 #5

  • Status changed from Feedback to Incomplete

Tested on

25.03-BETA (amd64)
built on Thu Apr 24 15:28:00 EDT 2025
FreeBSD 15.0-CURRENT

Everything is working as expected. If there are extra steps needed to reproduce this please detail them here. As it is, I'm marking this Incomplete.

DM Updated by dylan mendez over 1 year ago Actions
Copy link
 #7

  • Status changed from Incomplete to Closed

JP Updated by Jim Pingle over 1 year ago Actions
Copy link
 #8

  • Subject changed from IPSec allows deleting a P1/P2 with a VTI Interface Assigned to IPsec allows deleting P1/P2 entries with an assigned VTI

JP Updated by Jim Pingle over 1 year ago Actions
Copy link
 #9

  • Category changed from Interfaces to IPsec
Actions
Copy link

Also available in: Atom