Key for dhcp6ctl
-
You may have noticed that the falling in your DHCP log entries
Jan 31 16:18:15 dhcp6c 20803 failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
Jan 31 16:18:15 dhcp6c 20803 failed initialize control message authentication
Jan 31 16:18:15 dhcp6c 20803 skip opening control portThese are error messages that happen when the dhcp6c process (that is responsible for interacting with a remote dhcp6 server) tries to open a TCP control port to receive commands from the dhcp6ctl command. The intent is to authenticate each command using as hash algorithm HMAC-MD5. Since there is no /usr/local/etc/dhcp6cctlkey in the file system for pfsense, the process inhibits receiving commands, which from a security perspective is the safe course of action.
If errors annoy you as much as they annoy me, just create the file with any secret one-line phrase that you like, encoded in base-64.
You can use this link to encode your secret phrase https://www.base64encode.org
-
-