23.02 WebGUI enable ?
-
@litmaj0r In the Netgate docs for TNSR 23.02 if you scroll down to the TNSR Configuration Example Recipes there is an entry TNSR GUI Service with Client Certificate Authentication. I haven't tried it myself yet but there seems to be a lot of info about the process.
-
@misterb said in 23.02 WebGUI enable ?:
@litmaj0r In the Netgate docs for TNSR 23.02 if you scroll down to the TNSR Configuration Example Recipes there is an entry TNSR GUI Service with Client Certificate Authentication. I haven't tried it myself yet but there seems to be a lot of info about the process.
Good find misterb, will take a look :)
-
@misterb Awesome find ... it's very subtly snuck in there!
I ended up importing the Let's Encrypt CA, generating some certs, and ultimately once you get RESTCONF up and running, the Web GUI will become available. Generally, following these 2 guides will get you up and running:
- https://docs.netgate.com/tnsr/en/latest/recipes/restconf-pki-nacm/index.html
- https://docs.netgate.com/tnsr/en/latest/recipes/gui/index.html
Admittedly, if you run with a Public CA on the box, you'll have to do a bit more import and signing work, but it's not that bad. At least we figured out how to get the Web GUI running.
I'm having an issue getting the Client Cert imported on my mac (it claims "password is incorrect" despite export via the TNSR CLI and
opensslcommand), but that's a separate issue. And also, you could try to swap client-cert auth for password-auth, but that's not as secure so I'll just figure out the Client Cert issue. -
@gigabitguru Hi, I'm one of the devs who worked on the GUI. Password authentication is not currently supported. Make sure that you are using the correct algorithm to export the .p12 for macOS (I believe that the docs have a section on this). Please let me know if you have any more issues.
-
Any screenshots of the GUI?
-
@talwell Here are some images from my dev box. I believe that there will be some more marketing material coming out around this pretty soon as well.
-
Great start :)
Keep up the good work !
-
Agreed - great start. I have been working with TNSR for 3-4 years and have found that the CLI combined with the documentation is very useful. The added benefit of a GUI will certainly increase the adoption of the platform.
-
While following the https://docs.netgate.com/tnsr/en/latest/recipes/gui/index.html guide. still getting the error "protocol invalid-value error HTTP cert verification failed: unable to verify the first certificate[21]"
Not quite sure why getting the error. I did everything in the guide.
Wish the gui was simpler to access rather than this over complicated way to do certs, then install, etc. -
@DataIdeas-Josh I've been working on Nexus for the past few years, so I don't remember the fix for your problem, but I will refer this to the team. We're also working on adding TNSR support to Nexus, so it should be easier to get setup in the future (no specific timeline yet, but expect it sometime this year).
