pfsense-haproxy-package-doc icon indicating copy to clipboard operation
pfsense-haproxy-package-doc copied to clipboard

SSLOffloading options disappeared

Open smacz42 opened this issue 1 year ago • 7 comments

There are no longer any ssloffloading options in frontends as of 0.61_10.

When checking the SSLOffload checkbox on a frontend, it automatically gets assigned the first cert in pfsense's cert manager, regardless of what that cert is (Mine got asssigned a client VPN cert... a.k.a., NOT a "server" cert).

I tried uninstalling, rebooting, and reinstalling the package and the same behavior persists.

This was on pfsense 2.6.0 and 2.7.0.

2023-07-07-01-15-16-Services_ HAProxy_ Frontend_ Edit - protense admin andrewcz com

smacz42 avatar Jul 07 '23 05:07 smacz42

Can confirm.

Also unable to download HAProxy from the available packages without updating to 2.7.0, so I'm stuck until this gets fixed.

MikePereboom avatar Jul 14 '23 16:07 MikePereboom

I have the same issue on pfsense 2.7.0. Tried haproxy-devel package but still the same problem.

gustovshikov avatar Jul 16 '23 19:07 gustovshikov

FWIW... when I disabled the Dark Reader browser extension for that site, the SSL offloading section came back.

The reason I tried that was that I was looking at the source and did in fact see that section, but it wasn't being shown for some reason. I don't know if there's some oddities in the html that makes it odd for browser plugins, or at least Dark Reader.

So, for me (at least) this is solved. However, I'm not sure about for the two reports above.

smacz42 avatar Jul 17 '23 01:07 smacz42

I was using dark reader as well. Disabling it fixed the issue.

gustovshikov avatar Jul 17 '23 04:07 gustovshikov

@smacz42 o wow. Didn't even think about DarkReader as a possibility. Cheers! That solved my issue too.

I've also sent the author of this extension a email with feedback with this GitHub issue so hopefully can solve their end too.

andrew-flatters-bliss avatar Jul 17 '23 07:07 andrew-flatters-bliss

I'm using dark reader and the ssl offloading section appears just fine on both chrome and firefox. Obviously dark reader inactive for pfsense's web configurator since it has its own dark theme.

merc4derp avatar Jul 18 '23 10:07 merc4derp

@merc4derp yup what I switched over to since disabling Dark reader - didn't even realise it was on to be fair.

andrew-flatters-bliss avatar Jul 18 '23 10:07 andrew-flatters-bliss