NET-ERR-CERT- deadly handshake

Tiny 0

With everything at my desk (on multiple PC’s) I still decided to tune a bit. V2.8.2 installed fine. ‘Insecure’ GUI was an annoyance needing improvement. However, a certificate change produced the infamous NET-ERR-CERT- deadly handshake, not resolvable by console reroot or any browser I can find. So, no GUI.

This reflects a toggle switch and paper tape age, presumably with a new pfSense install required! Just when are we going to get error checking, messages and decent certificate handling Netgate? This kind of thing should simply NEVER happen. Tor works as before but DNS is still slow.

Is there any quicker fix as the trivial don’t work.

Patch

@Tiny-0 said in NET-ERR-CERT- deadly handshake:

V2.8.2 installed fine

Is that a typo?
An install image is available for v2.7.2
And I thought the latest version was v2.8.1 although considerable work has been done on v2.9.0

johnpoz

@Tiny-0 what is the exact error you are getting - deadly handshake is not an error I can find, there are many different net-err-cert, did it just say handshake failure?

There are many different things that cause an error with tls. time difference being a common one.

Are you trying to just use the self signed cert pfsense will generate? Need some more details if you want any help other than just guessing.

Also has @Patch mentioned already - there is no 2.8.2 version of pfsense.

Tiny 0

1 Typo, yes
2 Cause irrelevant - probably also typo
3 Image how? Should be easy for user of any o/s!
For instance dd, or UrBackup etc should be offered by pfSense GUI, not just config.

johnpoz

@Tiny-0 well have fun then.. You have no clue to how to post an image to a forum?

As to easy use as any os - Not sure what you're going on about to be honest.. What you want your firewall gui to look like a windows desktop??

At a lost to why you would need dd or urbackup in the gui for? If you want a backup of pfsense - download the config file..

Tiny 0

Can access to debug cert using Chrome and 'thisisunsafe' at error page (previously nogo because my web search showed spaces, which fails). -No need at all to reinstall pfSense!