Project

General

Profile

Bug #7566

need more dh-parameters files or generate it

Added by Jeremy C. Reed 4 months ago. Updated 4 months ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
OpenVPN
Target version:
-
Start date:
05/20/2017
Due date:
% Done:

0%

Affected version:
Affected Architecture:

Description

/etc/inc/openvpn.inc
used vpn_openvpn_server.php to set dh_length
but only three /etc/dh-parameters.NUM files are available,
but drop-down allows others resulting in:

openvpn34890: Options error: - -dh fails with '/etc/dh-parameters.3072': No such file or directory

Note that code for other dh-parameters is commented out.

Well I did see https://redmine.pfsense.org/issues/6962 says this is fixed but I don't see commit hash to know how. And looking in github I see only the three files.

(I noticed this while working on my book.
My list of bugs is at http://reedmedia.net/books/pfsense/bugs.html )

History

#1 Updated by Jim Pingle 4 months ago

  • Category changed from VPN to OpenVPN
  • Status changed from New to Rejected

On 2.4 the GUI only shows options for files that exist. Click the "i" on the text for the setting and follow the link for instructions on how to generate the files. The older ticket, #6962, was fixed to behave this way.

We can't realistically offer a GUI option for that because generating the parameters for larger sizes takes a very, very long time on most hardware.

Issues like this should be tested against 2.4, especially since the other ticket specifically had a 2.4 target and was marked fixed. You'll only find the corrected behavior in that version, unless noted otherwise on the ticket.

Also available in: Atom PDF