fix(ipsec): показывать неопределённый статус при общих Remote ID
This commit is contained in:
Denozordec committed
1 parent
7815e00a1c
commit
cb6ec09312
20 files changed
+1077
-15
No files matched your search
@@ -0,0 +1,57 @@
|
||||
{
|
||||
"date": "2026-10-10",
|
||||
"runtime": {
|
||||
"backend": "ux-alias112",
|
||||
"frontend": "ux-alias112-version"
|
||||
},
|
||||
"httpMocks": false,
|
||||
"cases": [
|
||||
{
|
||||
"theme": "dark",
|
||||
"width": 1280,
|
||||
"rootThemeConfirmed": true,
|
||||
"versionConfirmed": true,
|
||||
"unconnectedCertificateOffline": true,
|
||||
"ambiguousClientsUnknown": true,
|
||||
"unknownOnlineCount": true,
|
||||
"reloadConfirmed": true,
|
||||
"noPageOverflow": true
|
||||
},
|
||||
{
|
||||
"theme": "dark",
|
||||
"width": 320,
|
||||
"rootThemeConfirmed": true,
|
||||
"versionConfirmed": false,
|
||||
"unconnectedCertificateOffline": true,
|
||||
"ambiguousClientsUnknown": true,
|
||||
"unknownOnlineCount": true,
|
||||
"reloadConfirmed": true,
|
||||
"noPageOverflow": true
|
||||
},
|
||||
{
|
||||
"theme": "light",
|
||||
"width": 1280,
|
||||
"rootThemeConfirmed": true,
|
||||
"versionConfirmed": true,
|
||||
"unconnectedCertificateOffline": true,
|
||||
"ambiguousClientsUnknown": true,
|
||||
"unknownOnlineCount": true,
|
||||
"reloadConfirmed": true,
|
||||
"noPageOverflow": true
|
||||
},
|
||||
{
|
||||
"theme": "light",
|
||||
"width": 320,
|
||||
"rootThemeConfirmed": true,
|
||||
"versionConfirmed": false,
|
||||
"unconnectedCertificateOffline": true,
|
||||
"ambiguousClientsUnknown": true,
|
||||
"unknownOnlineCount": true,
|
||||
"reloadConfirmed": true,
|
||||
"noPageOverflow": true
|
||||
}
|
||||
],
|
||||
"pageErrors": [],
|
||||
"applicationWrites": [],
|
||||
"scope": "Real certificate/PSK alias ambiguity, unknown row statuses and online count, reload, desktop/mobile, two themes"
|
||||
}
|
||||
@@ -0,0 +1,69 @@
|
||||
{
|
||||
"date": "2026-10-10",
|
||||
"baseCommit": "7815e00",
|
||||
"backendBase": "build-id111",
|
||||
"frontendBase": "build-a11y101",
|
||||
"backendContext": "build-alias112",
|
||||
"frontendContext": "build-alias112-front",
|
||||
"source": "Explicit working-file overrides; revision label alias112 is not a Git SHA",
|
||||
"contextHashes": {
|
||||
"backend": {
|
||||
"backend/src/services/ipsec-live.ts": "7f5cccea14c63e96aa9774beab28257a9a81d624cc15a7ef88d19e17e25d5fd2",
|
||||
"backend/src/services/ipsec-state.test.ts": "8a0f19b3a16962a2217ac76bfd4c1009813f59cf9e50a4b90fb31165ff6a9a6d",
|
||||
"packages/contracts/src/ipsec.ts": "17f9fdcd528fba5fc5df539ca4392bdcd98d99957b1273e83c51537efa1630e5"
|
||||
},
|
||||
"frontend": {
|
||||
"app/(main)/ipsec/page.tsx": "2673411a60fd1796389ddbb6cba37a16b607af87fceedfc37e89e18717fd013e",
|
||||
"components/ipsec/ipsec-users-grid.tsx": "75a4f4c7f66badbc425669114982fbd067121e93ecf7800e02b3c8da83d80cfe",
|
||||
"components/ipsec/ipsec-server-grid.tsx": "c48e55cb0e63c9b7ca55f6277b194aa748bc7b40982459cdb9c4fe331df68011",
|
||||
"packages/contracts/src/ipsec.ts": "17f9fdcd528fba5fc5df539ca4392bdcd98d99957b1273e83c51537efa1630e5"
|
||||
}
|
||||
},
|
||||
"contextByteHashesMatch": true,
|
||||
"compiled": [
|
||||
{
|
||||
"path": "backend/dist/services/ipsec-live.js",
|
||||
"sha256": "0c8f4e50290df15dd1cc62bcdb8879c8f05025cfc7e29731ee486e472fa6a5fe",
|
||||
"backendContainerByteHashMatches": true
|
||||
},
|
||||
{
|
||||
"path": "packages/contracts/dist/ipsec.js",
|
||||
"sha256": "e9a9f21e6b6e19831380981108303b37ce82159575e7e198e66711ffdae576a6",
|
||||
"backendContainerByteHashMatches": true
|
||||
}
|
||||
],
|
||||
"deployment": {
|
||||
"backendImage": "sha256:03e110dd414b575ad9a8f13f7b0302f241dbd3e439418c8ad1bbca7dc1c6fc9c",
|
||||
"frontendImage": "sha256:4bf4cad8b3c990a7259f84cf27fd6bb9ee34e3db904223b559c0559dbbe094a2",
|
||||
"revisionLabel": "alias112",
|
||||
"health": {
|
||||
"status": "ok",
|
||||
"timestamp": "2026-10-10T03:19:59.783Z",
|
||||
"version": "1.0.0-test.alias112",
|
||||
"eventLoopDelayMs": 20,
|
||||
"flowWorker": {
|
||||
"alive": false,
|
||||
"bound": false,
|
||||
"pendingSize": 0,
|
||||
"dropped": 0,
|
||||
"packetsReceived": 0
|
||||
}
|
||||
},
|
||||
"contextHashes": {
|
||||
"backend": {
|
||||
"backend/src/services/ipsec-live.ts": "7f5cccea14c63e96aa9774beab28257a9a81d624cc15a7ef88d19e17e25d5fd2",
|
||||
"backend/src/services/ipsec-state.test.ts": "8a0f19b3a16962a2217ac76bfd4c1009813f59cf9e50a4b90fb31165ff6a9a6d",
|
||||
"packages/contracts/src/ipsec.ts": "17f9fdcd528fba5fc5df539ca4392bdcd98d99957b1273e83c51537efa1630e5"
|
||||
},
|
||||
"frontend": {
|
||||
"app/(main)/ipsec/page.tsx": "2673411a60fd1796389ddbb6cba37a16b607af87fceedfc37e89e18717fd013e",
|
||||
"components/ipsec/ipsec-users-grid.tsx": "75a4f4c7f66badbc425669114982fbd067121e93ecf7800e02b3c8da83d80cfe",
|
||||
"components/ipsec/ipsec-server-grid.tsx": "c48e55cb0e63c9b7ca55f6277b194aa748bc7b40982459cdb9c4fe331df68011",
|
||||
"packages/contracts/src/ipsec.ts": "17f9fdcd528fba5fc5df539ca4392bdcd98d99957b1273e83c51537efa1630e5"
|
||||
}
|
||||
},
|
||||
"frontendInitialImage": "sha256:0cf246b79dd054e5ecb4ce692d82badc3324211615fb9313aaa7b6dbfc2881f9",
|
||||
"frontendTag": "ux-alias112-version",
|
||||
"frontendVersion": "1.0.0-test.alias112"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,779 @@
|
||||
{
|
||||
"date": "2026-10-10",
|
||||
"block": "12.5.112",
|
||||
"runtime": {
|
||||
"backend": "ux-alias112",
|
||||
"frontend": "ux-alias112-version",
|
||||
"version": "1.0.0-test.alias112"
|
||||
},
|
||||
"before": {
|
||||
"date": "2026-10-10",
|
||||
"block": "12.5.112",
|
||||
"name": "mm-ipsec112-1791601534901",
|
||||
"cn": "mm-ipsec112-1791601534901",
|
||||
"observations": [
|
||||
{
|
||||
"serverId": 1,
|
||||
"active": [
|
||||
{
|
||||
".id": "*1",
|
||||
"id": "CN=mm-ipsec112-1791601534901",
|
||||
"state": "established",
|
||||
"dynamic-address": "198.18.112.250",
|
||||
"remote-address": "104.165.244.7",
|
||||
"uptime": "1s"
|
||||
}
|
||||
],
|
||||
"catalog": [
|
||||
{
|
||||
"name": "CN=mm-ipsec112-1791601534901",
|
||||
"commonName": "CN=mm-ipsec112-1791601534901",
|
||||
"certName": "ipsec-user-mm-ipsec112-1791601534901-decoy",
|
||||
"online": false
|
||||
},
|
||||
{
|
||||
"name": "mm-ipsec112-1791601534901",
|
||||
"commonName": "mm-ipsec112-1791601534901",
|
||||
"certName": "ipsec-user-mm-ipsec112-1791601534901",
|
||||
"online": true,
|
||||
"activeAddress": "198.18.112.250"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"serverId": 2,
|
||||
"active": [
|
||||
{
|
||||
".id": "*1",
|
||||
"id": "194.226.121.150",
|
||||
"state": "established",
|
||||
"remote-address": "194.226.121.150",
|
||||
"uptime": "1s"
|
||||
}
|
||||
],
|
||||
"catalog": []
|
||||
}
|
||||
],
|
||||
"cleanup": [
|
||||
{
|
||||
"serverId": 1,
|
||||
"/system/logging": true,
|
||||
"/ip/ipsec/identity": true,
|
||||
"/ip/ipsec/peer": true,
|
||||
"/ip/ipsec/policy": true,
|
||||
"/ip/ipsec/policy/group": true,
|
||||
"/ip/ipsec/mode-config": true,
|
||||
"/ip/ipsec/proposal": true,
|
||||
"/ip/ipsec/profile": true,
|
||||
"/certificate": true,
|
||||
"/file": true,
|
||||
"/ip/address": true,
|
||||
"/ip/route": true,
|
||||
"/ip/firewall/nat": true
|
||||
},
|
||||
{
|
||||
"serverId": 2,
|
||||
"/system/logging": true,
|
||||
"/ip/ipsec/identity": true,
|
||||
"/ip/ipsec/peer": true,
|
||||
"/ip/ipsec/policy": true,
|
||||
"/ip/ipsec/policy/group": true,
|
||||
"/ip/ipsec/mode-config": true,
|
||||
"/ip/ipsec/proposal": true,
|
||||
"/ip/ipsec/profile": true,
|
||||
"/certificate": true,
|
||||
"/file": true,
|
||||
"/ip/address": true,
|
||||
"/ip/route": true,
|
||||
"/ip/firewall/nat": true
|
||||
}
|
||||
],
|
||||
"databaseWrites": false,
|
||||
"certificate": {
|
||||
"name": "ipsec-user-mm-ipsec112-1791601534901",
|
||||
"common-name": "mm-ipsec112-1791601534901",
|
||||
"ca": "mm-ipsec112-1791601534901-ca",
|
||||
"key-usage": "digital-signature,key-encipherment,tls-client"
|
||||
},
|
||||
"certificates": [
|
||||
[
|
||||
{
|
||||
"name": "mm-ipsec112-1791601534901-ca",
|
||||
"trusted": "true",
|
||||
"trust-store": "all",
|
||||
"invalid-before": "2026-10-10 06:05:35",
|
||||
"invalid-after": "2026-10-12 06:05:35",
|
||||
"common-name": "mm-ipsec112-1791601534901-CA"
|
||||
},
|
||||
{
|
||||
"name": "mm-ipsec112-1791601534901-server",
|
||||
"trusted": "false",
|
||||
"trust-store": "all",
|
||||
"ca": "mm-ipsec112-1791601534901-ca",
|
||||
"invalid-before": "2026-10-10 06:05:36",
|
||||
"invalid-after": "2026-10-12 06:05:36",
|
||||
"common-name": "194.226.121.150"
|
||||
},
|
||||
{
|
||||
"name": "ipsec-user-mm-ipsec112-1791601534901",
|
||||
"trusted": "false",
|
||||
"trust-store": "all",
|
||||
"ca": "mm-ipsec112-1791601534901-ca",
|
||||
"invalid-before": "2026-10-10 06:05:36",
|
||||
"invalid-after": "2026-10-12 06:05:36",
|
||||
"common-name": "mm-ipsec112-1791601534901"
|
||||
},
|
||||
{
|
||||
"name": "ipsec-user-mm-ipsec112-1791601534901-decoy",
|
||||
"trusted": "false",
|
||||
"trust-store": "all",
|
||||
"ca": "mm-ipsec112-1791601534901-ca",
|
||||
"invalid-before": "2026-10-10 06:05:37",
|
||||
"invalid-after": "2026-10-12 06:05:37",
|
||||
"common-name": "CN=mm-ipsec112-1791601534901"
|
||||
}
|
||||
],
|
||||
[
|
||||
{
|
||||
"name": "mm-ipsec112-1791601534901-client-imported",
|
||||
"trusted": "true",
|
||||
"trust-store": "ipsec",
|
||||
"invalid-before": "2026-10-10 05:05:36",
|
||||
"invalid-after": "2026-10-12 05:05:36",
|
||||
"common-name": "mm-ipsec112-1791601534901"
|
||||
},
|
||||
{
|
||||
"name": "mm-ipsec112-1791601534901-ca-imported",
|
||||
"trusted": "true",
|
||||
"trust-store": "ipsec",
|
||||
"invalid-before": "2026-10-10 05:05:35",
|
||||
"invalid-after": "2026-10-12 05:05:35",
|
||||
"common-name": "mm-ipsec112-1791601534901-CA"
|
||||
}
|
||||
]
|
||||
],
|
||||
"catalogCorrect": true,
|
||||
"dnPhase": {
|
||||
"active": [
|
||||
{
|
||||
".id": "*1",
|
||||
"id": "CN=mm-ipsec112-1791601534901",
|
||||
"state": "established",
|
||||
"dynamic-address": "198.18.112.250",
|
||||
"remote-address": "104.165.244.7",
|
||||
"uptime": "1s"
|
||||
}
|
||||
],
|
||||
"clients": [
|
||||
{
|
||||
"name": "CN=mm-ipsec112-1791601534901",
|
||||
"commonName": "CN=mm-ipsec112-1791601534901",
|
||||
"certName": "ipsec-user-mm-ipsec112-1791601534901-decoy",
|
||||
"online": false
|
||||
},
|
||||
{
|
||||
"name": "mm-ipsec112-1791601534901",
|
||||
"commonName": "mm-ipsec112-1791601534901",
|
||||
"certName": "ipsec-user-mm-ipsec112-1791601534901",
|
||||
"online": true,
|
||||
"activeAddress": "198.18.112.250"
|
||||
}
|
||||
],
|
||||
"decoyOnline": false
|
||||
},
|
||||
"fqdnPhase": {
|
||||
"configuredRemoteId": "fqdn:mm-ipsec112-1791601534901.example",
|
||||
"nativeId": "mm-ipsec112-1791601534901.example",
|
||||
"assignedAddress": "198.18.112.250",
|
||||
"originalOnline": true,
|
||||
"decoyOnline": false
|
||||
},
|
||||
"aliasName": "mm-ipsec112-1791601534901-psk",
|
||||
"aliasPhase": {
|
||||
"native": [
|
||||
{
|
||||
"id": "mm-ipsec112-1791601534901.example",
|
||||
"state": "established",
|
||||
"dynamic-address": "198.18.112.250"
|
||||
}
|
||||
],
|
||||
"clients": [
|
||||
{
|
||||
"name": "CN=mm-ipsec112-1791601534901",
|
||||
"kind": "cert",
|
||||
"online": false
|
||||
},
|
||||
{
|
||||
"name": "mm-ipsec112-1791601534901",
|
||||
"kind": "cert",
|
||||
"online": true,
|
||||
"activeAddress": "198.18.112.250"
|
||||
},
|
||||
{
|
||||
"name": "mm-ipsec112-1791601534901-psk",
|
||||
"kind": "psk",
|
||||
"online": true,
|
||||
"activeAddress": "198.18.112.250"
|
||||
}
|
||||
],
|
||||
"summary": {
|
||||
"clientsTotal": 3,
|
||||
"clientsOnline": 2
|
||||
}
|
||||
},
|
||||
"error": "One session still attributed to multiple configured clients"
|
||||
},
|
||||
"accepted": {
|
||||
"date": "2026-10-10",
|
||||
"block": "12.5.112",
|
||||
"name": "mm-ipsec112-1791602887310",
|
||||
"cn": "mm-ipsec112-1791602887310",
|
||||
"observations": [
|
||||
{
|
||||
"serverId": 1,
|
||||
"active": [
|
||||
{
|
||||
".id": "*1",
|
||||
"id": "CN=mm-ipsec112-1791602887310",
|
||||
"state": "established",
|
||||
"dynamic-address": "198.18.112.250",
|
||||
"remote-address": "104.165.244.7",
|
||||
"uptime": "1s"
|
||||
}
|
||||
],
|
||||
"catalog": [
|
||||
{
|
||||
"name": "CN=mm-ipsec112-1791602887310",
|
||||
"commonName": "CN=mm-ipsec112-1791602887310",
|
||||
"certName": "ipsec-user-mm-ipsec112-1791602887310-decoy",
|
||||
"online": false
|
||||
},
|
||||
{
|
||||
"name": "mm-ipsec112-1791602887310",
|
||||
"commonName": "mm-ipsec112-1791602887310",
|
||||
"certName": "ipsec-user-mm-ipsec112-1791602887310",
|
||||
"online": true,
|
||||
"activeAddress": "198.18.112.250"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"serverId": 2,
|
||||
"active": [
|
||||
{
|
||||
".id": "*1",
|
||||
"id": "194.226.121.150",
|
||||
"state": "established",
|
||||
"remote-address": "194.226.121.150",
|
||||
"uptime": "0s"
|
||||
}
|
||||
],
|
||||
"catalog": []
|
||||
}
|
||||
],
|
||||
"cleanup": [
|
||||
{
|
||||
"serverId": 1,
|
||||
"/system/logging": true,
|
||||
"/ip/ipsec/identity": true,
|
||||
"/ip/ipsec/peer": true,
|
||||
"/ip/ipsec/policy": true,
|
||||
"/ip/ipsec/policy/group": true,
|
||||
"/ip/ipsec/mode-config": true,
|
||||
"/ip/ipsec/proposal": true,
|
||||
"/ip/ipsec/profile": true,
|
||||
"/certificate": true,
|
||||
"/file": true,
|
||||
"/ip/address": true,
|
||||
"/ip/route": true,
|
||||
"/ip/firewall/nat": true
|
||||
},
|
||||
{
|
||||
"serverId": 2,
|
||||
"/system/logging": true,
|
||||
"/ip/ipsec/identity": true,
|
||||
"/ip/ipsec/peer": true,
|
||||
"/ip/ipsec/policy": true,
|
||||
"/ip/ipsec/policy/group": true,
|
||||
"/ip/ipsec/mode-config": true,
|
||||
"/ip/ipsec/proposal": true,
|
||||
"/ip/ipsec/profile": true,
|
||||
"/certificate": true,
|
||||
"/file": true,
|
||||
"/ip/address": true,
|
||||
"/ip/route": true,
|
||||
"/ip/firewall/nat": true
|
||||
}
|
||||
],
|
||||
"databaseWrites": false,
|
||||
"certificate": {
|
||||
"name": "ipsec-user-mm-ipsec112-1791602887310",
|
||||
"common-name": "mm-ipsec112-1791602887310",
|
||||
"ca": "mm-ipsec112-1791602887310-ca",
|
||||
"key-usage": "digital-signature,key-encipherment,tls-client"
|
||||
},
|
||||
"certificates": [
|
||||
[
|
||||
{
|
||||
"name": "mm-ipsec112-1791602887310-ca",
|
||||
"trusted": "true",
|
||||
"trust-store": "all",
|
||||
"invalid-before": "2026-10-10 06:28:08",
|
||||
"invalid-after": "2026-10-12 06:28:08",
|
||||
"common-name": "mm-ipsec112-1791602887310-CA"
|
||||
},
|
||||
{
|
||||
"name": "mm-ipsec112-1791602887310-server",
|
||||
"trusted": "false",
|
||||
"trust-store": "all",
|
||||
"ca": "mm-ipsec112-1791602887310-ca",
|
||||
"invalid-before": "2026-10-10 06:28:09",
|
||||
"invalid-after": "2026-10-12 06:28:09",
|
||||
"common-name": "194.226.121.150"
|
||||
},
|
||||
{
|
||||
"name": "ipsec-user-mm-ipsec112-1791602887310",
|
||||
"trusted": "false",
|
||||
"trust-store": "all",
|
||||
"ca": "mm-ipsec112-1791602887310-ca",
|
||||
"invalid-before": "2026-10-10 06:28:10",
|
||||
"invalid-after": "2026-10-12 06:28:10",
|
||||
"common-name": "mm-ipsec112-1791602887310"
|
||||
},
|
||||
{
|
||||
"name": "ipsec-user-mm-ipsec112-1791602887310-decoy",
|
||||
"trusted": "false",
|
||||
"trust-store": "all",
|
||||
"ca": "mm-ipsec112-1791602887310-ca",
|
||||
"invalid-before": "2026-10-10 06:28:10",
|
||||
"invalid-after": "2026-10-12 06:28:10",
|
||||
"common-name": "CN=mm-ipsec112-1791602887310"
|
||||
}
|
||||
],
|
||||
[
|
||||
{
|
||||
"name": "mm-ipsec112-1791602887310-client-imported",
|
||||
"trusted": "true",
|
||||
"trust-store": "ipsec",
|
||||
"invalid-before": "2026-10-10 05:28:10",
|
||||
"invalid-after": "2026-10-12 05:28:10",
|
||||
"common-name": "mm-ipsec112-1791602887310"
|
||||
},
|
||||
{
|
||||
"name": "mm-ipsec112-1791602887310-ca-imported",
|
||||
"trusted": "true",
|
||||
"trust-store": "ipsec",
|
||||
"invalid-before": "2026-10-10 05:28:08",
|
||||
"invalid-after": "2026-10-12 05:28:08",
|
||||
"common-name": "mm-ipsec112-1791602887310-CA"
|
||||
}
|
||||
]
|
||||
],
|
||||
"catalogCorrect": true,
|
||||
"dnPhase": {
|
||||
"active": [
|
||||
{
|
||||
".id": "*1",
|
||||
"id": "CN=mm-ipsec112-1791602887310",
|
||||
"state": "established",
|
||||
"dynamic-address": "198.18.112.250",
|
||||
"remote-address": "104.165.244.7",
|
||||
"uptime": "1s"
|
||||
}
|
||||
],
|
||||
"clients": [
|
||||
{
|
||||
"name": "CN=mm-ipsec112-1791602887310",
|
||||
"commonName": "CN=mm-ipsec112-1791602887310",
|
||||
"certName": "ipsec-user-mm-ipsec112-1791602887310-decoy",
|
||||
"online": false
|
||||
},
|
||||
{
|
||||
"name": "mm-ipsec112-1791602887310",
|
||||
"commonName": "mm-ipsec112-1791602887310",
|
||||
"certName": "ipsec-user-mm-ipsec112-1791602887310",
|
||||
"online": true,
|
||||
"activeAddress": "198.18.112.250"
|
||||
}
|
||||
],
|
||||
"decoyOnline": false
|
||||
},
|
||||
"fqdnPhase": {
|
||||
"configuredRemoteId": "fqdn:mm-ipsec112-1791602887310.example",
|
||||
"nativeId": "mm-ipsec112-1791602887310.example",
|
||||
"assignedAddress": "198.18.112.250",
|
||||
"originalOnline": true,
|
||||
"decoyOnline": false
|
||||
},
|
||||
"aliasName": "mm-ipsec112-1791602887310-psk",
|
||||
"aliasPhase": {
|
||||
"native": [
|
||||
{
|
||||
"id": "mm-ipsec112-1791602887310.example",
|
||||
"state": "established",
|
||||
"dynamic-address": "198.18.112.250"
|
||||
}
|
||||
],
|
||||
"clients": [
|
||||
{
|
||||
"name": "CN=mm-ipsec112-1791602887310",
|
||||
"kind": "cert",
|
||||
"online": false
|
||||
},
|
||||
{
|
||||
"name": "mm-ipsec112-1791602887310",
|
||||
"kind": "cert",
|
||||
"online": false,
|
||||
"sessionAmbiguous": true
|
||||
},
|
||||
{
|
||||
"name": "mm-ipsec112-1791602887310-psk",
|
||||
"kind": "psk",
|
||||
"online": false,
|
||||
"sessionAmbiguous": true
|
||||
}
|
||||
],
|
||||
"summary": {
|
||||
"clientsTotal": 3,
|
||||
"clientsOnline": 0,
|
||||
"clientsSessionAmbiguous": 2
|
||||
}
|
||||
},
|
||||
"recovered": {
|
||||
"originalOnline": true,
|
||||
"sessionAmbiguous": false,
|
||||
"activeAddress": "198.18.112.250"
|
||||
}
|
||||
},
|
||||
"preliminaryFrontendVersion": {
|
||||
"displayedVersion": "dev",
|
||||
"reason": "APP_VERSION was ignored by frontend Dockerfile; corrected NEXT_PUBLIC_APP_VERSION",
|
||||
"functionalBrowser": {
|
||||
"date": "2026-10-10",
|
||||
"runtime": {
|
||||
"backend": "ux-alias112",
|
||||
"frontend": "ux-alias112"
|
||||
},
|
||||
"httpMocks": false,
|
||||
"cases": [
|
||||
{
|
||||
"theme": "dark",
|
||||
"width": 1280,
|
||||
"rootThemeConfirmed": true,
|
||||
"unconnectedCertificateOffline": true,
|
||||
"ambiguousClientsUnknown": true,
|
||||
"unknownOnlineCount": true,
|
||||
"reloadConfirmed": true,
|
||||
"noPageOverflow": true
|
||||
},
|
||||
{
|
||||
"theme": "dark",
|
||||
"width": 320,
|
||||
"rootThemeConfirmed": true,
|
||||
"unconnectedCertificateOffline": true,
|
||||
"ambiguousClientsUnknown": true,
|
||||
"unknownOnlineCount": true,
|
||||
"reloadConfirmed": true,
|
||||
"noPageOverflow": true
|
||||
},
|
||||
{
|
||||
"theme": "light",
|
||||
"width": 1280,
|
||||
"rootThemeConfirmed": true,
|
||||
"unconnectedCertificateOffline": true,
|
||||
"ambiguousClientsUnknown": true,
|
||||
"unknownOnlineCount": true,
|
||||
"reloadConfirmed": true,
|
||||
"noPageOverflow": true
|
||||
},
|
||||
{
|
||||
"theme": "light",
|
||||
"width": 320,
|
||||
"rootThemeConfirmed": true,
|
||||
"unconnectedCertificateOffline": true,
|
||||
"ambiguousClientsUnknown": true,
|
||||
"unknownOnlineCount": true,
|
||||
"reloadConfirmed": true,
|
||||
"noPageOverflow": true
|
||||
}
|
||||
],
|
||||
"pageErrors": [],
|
||||
"applicationWrites": [],
|
||||
"scope": "Real certificate/PSK alias ambiguity, unknown row statuses and online count, reload, desktop/mobile, two themes"
|
||||
},
|
||||
"native": {
|
||||
"date": "2026-10-10",
|
||||
"block": "12.5.112",
|
||||
"name": "mm-ipsec112-1791602069063",
|
||||
"cn": "mm-ipsec112-1791602069063",
|
||||
"observations": [
|
||||
{
|
||||
"serverId": 1,
|
||||
"active": [
|
||||
{
|
||||
".id": "*1",
|
||||
"id": "CN=mm-ipsec112-1791602069063",
|
||||
"state": "established",
|
||||
"dynamic-address": "198.18.112.250",
|
||||
"remote-address": "104.165.244.7",
|
||||
"uptime": "1s"
|
||||
}
|
||||
],
|
||||
"catalog": [
|
||||
{
|
||||
"name": "CN=mm-ipsec112-1791602069063",
|
||||
"commonName": "CN=mm-ipsec112-1791602069063",
|
||||
"certName": "ipsec-user-mm-ipsec112-1791602069063-decoy",
|
||||
"online": false
|
||||
},
|
||||
{
|
||||
"name": "mm-ipsec112-1791602069063",
|
||||
"commonName": "mm-ipsec112-1791602069063",
|
||||
"certName": "ipsec-user-mm-ipsec112-1791602069063",
|
||||
"online": true,
|
||||
"activeAddress": "198.18.112.250"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"serverId": 2,
|
||||
"active": [
|
||||
{
|
||||
".id": "*1",
|
||||
"id": "194.226.121.150",
|
||||
"state": "established",
|
||||
"remote-address": "194.226.121.150",
|
||||
"uptime": "1s"
|
||||
}
|
||||
],
|
||||
"catalog": []
|
||||
}
|
||||
],
|
||||
"cleanup": [
|
||||
{
|
||||
"serverId": 1,
|
||||
"/system/logging": true,
|
||||
"/ip/ipsec/identity": true,
|
||||
"/ip/ipsec/peer": true,
|
||||
"/ip/ipsec/policy": true,
|
||||
"/ip/ipsec/policy/group": true,
|
||||
"/ip/ipsec/mode-config": true,
|
||||
"/ip/ipsec/proposal": true,
|
||||
"/ip/ipsec/profile": true,
|
||||
"/certificate": true,
|
||||
"/file": true,
|
||||
"/ip/address": true,
|
||||
"/ip/route": true,
|
||||
"/ip/firewall/nat": true
|
||||
},
|
||||
{
|
||||
"serverId": 2,
|
||||
"/system/logging": true,
|
||||
"/ip/ipsec/identity": true,
|
||||
"/ip/ipsec/peer": true,
|
||||
"/ip/ipsec/policy": true,
|
||||
"/ip/ipsec/policy/group": true,
|
||||
"/ip/ipsec/mode-config": true,
|
||||
"/ip/ipsec/proposal": true,
|
||||
"/ip/ipsec/profile": true,
|
||||
"/certificate": true,
|
||||
"/file": true,
|
||||
"/ip/address": true,
|
||||
"/ip/route": true,
|
||||
"/ip/firewall/nat": true
|
||||
}
|
||||
],
|
||||
"databaseWrites": false,
|
||||
"certificate": {
|
||||
"name": "ipsec-user-mm-ipsec112-1791602069063",
|
||||
"common-name": "mm-ipsec112-1791602069063",
|
||||
"ca": "mm-ipsec112-1791602069063-ca",
|
||||
"key-usage": "digital-signature,key-encipherment,tls-client"
|
||||
},
|
||||
"certificates": [
|
||||
[
|
||||
{
|
||||
"name": "mm-ipsec112-1791602069063-ca",
|
||||
"trusted": "true",
|
||||
"trust-store": "all",
|
||||
"invalid-before": "2026-10-10 06:14:30",
|
||||
"invalid-after": "2026-10-12 06:14:30",
|
||||
"common-name": "mm-ipsec112-1791602069063-CA"
|
||||
},
|
||||
{
|
||||
"name": "mm-ipsec112-1791602069063-server",
|
||||
"trusted": "false",
|
||||
"trust-store": "all",
|
||||
"ca": "mm-ipsec112-1791602069063-ca",
|
||||
"invalid-before": "2026-10-10 06:14:32",
|
||||
"invalid-after": "2026-10-12 06:14:32",
|
||||
"common-name": "194.226.121.150"
|
||||
},
|
||||
{
|
||||
"name": "ipsec-user-mm-ipsec112-1791602069063",
|
||||
"trusted": "false",
|
||||
"trust-store": "all",
|
||||
"ca": "mm-ipsec112-1791602069063-ca",
|
||||
"invalid-before": "2026-10-10 06:14:33",
|
||||
"invalid-after": "2026-10-12 06:14:33",
|
||||
"common-name": "mm-ipsec112-1791602069063"
|
||||
},
|
||||
{
|
||||
"name": "ipsec-user-mm-ipsec112-1791602069063-decoy",
|
||||
"trusted": "false",
|
||||
"trust-store": "all",
|
||||
"ca": "mm-ipsec112-1791602069063-ca",
|
||||
"invalid-before": "2026-10-10 06:14:34",
|
||||
"invalid-after": "2026-10-12 06:14:34",
|
||||
"common-name": "CN=mm-ipsec112-1791602069063"
|
||||
}
|
||||
],
|
||||
[
|
||||
{
|
||||
"name": "mm-ipsec112-1791602069063-client-imported",
|
||||
"trusted": "true",
|
||||
"trust-store": "ipsec",
|
||||
"invalid-before": "2026-10-10 05:14:33",
|
||||
"invalid-after": "2026-10-12 05:14:33",
|
||||
"common-name": "mm-ipsec112-1791602069063"
|
||||
},
|
||||
{
|
||||
"name": "mm-ipsec112-1791602069063-ca-imported",
|
||||
"trusted": "true",
|
||||
"trust-store": "ipsec",
|
||||
"invalid-before": "2026-10-10 05:14:30",
|
||||
"invalid-after": "2026-10-12 05:14:30",
|
||||
"common-name": "mm-ipsec112-1791602069063-CA"
|
||||
}
|
||||
]
|
||||
],
|
||||
"catalogCorrect": true,
|
||||
"dnPhase": {
|
||||
"active": [
|
||||
{
|
||||
".id": "*1",
|
||||
"id": "CN=mm-ipsec112-1791602069063",
|
||||
"state": "established",
|
||||
"dynamic-address": "198.18.112.250",
|
||||
"remote-address": "104.165.244.7",
|
||||
"uptime": "1s"
|
||||
}
|
||||
],
|
||||
"clients": [
|
||||
{
|
||||
"name": "CN=mm-ipsec112-1791602069063",
|
||||
"commonName": "CN=mm-ipsec112-1791602069063",
|
||||
"certName": "ipsec-user-mm-ipsec112-1791602069063-decoy",
|
||||
"online": false
|
||||
},
|
||||
{
|
||||
"name": "mm-ipsec112-1791602069063",
|
||||
"commonName": "mm-ipsec112-1791602069063",
|
||||
"certName": "ipsec-user-mm-ipsec112-1791602069063",
|
||||
"online": true,
|
||||
"activeAddress": "198.18.112.250"
|
||||
}
|
||||
],
|
||||
"decoyOnline": false
|
||||
},
|
||||
"fqdnPhase": {
|
||||
"configuredRemoteId": "fqdn:mm-ipsec112-1791602069063.example",
|
||||
"nativeId": "mm-ipsec112-1791602069063.example",
|
||||
"assignedAddress": "198.18.112.250",
|
||||
"originalOnline": true,
|
||||
"decoyOnline": false
|
||||
},
|
||||
"aliasName": "mm-ipsec112-1791602069063-psk",
|
||||
"aliasPhase": {
|
||||
"native": [
|
||||
{
|
||||
"id": "mm-ipsec112-1791602069063.example",
|
||||
"state": "established",
|
||||
"dynamic-address": "198.18.112.250"
|
||||
}
|
||||
],
|
||||
"clients": [
|
||||
{
|
||||
"name": "CN=mm-ipsec112-1791602069063",
|
||||
"kind": "cert",
|
||||
"online": false
|
||||
},
|
||||
{
|
||||
"name": "mm-ipsec112-1791602069063",
|
||||
"kind": "cert",
|
||||
"online": false,
|
||||
"sessionAmbiguous": true
|
||||
},
|
||||
{
|
||||
"name": "mm-ipsec112-1791602069063-psk",
|
||||
"kind": "psk",
|
||||
"online": false,
|
||||
"sessionAmbiguous": true
|
||||
}
|
||||
],
|
||||
"summary": {
|
||||
"clientsTotal": 3,
|
||||
"clientsOnline": 0,
|
||||
"clientsSessionAmbiguous": 2
|
||||
}
|
||||
},
|
||||
"recovered": {
|
||||
"originalOnline": true,
|
||||
"sessionAmbiguous": false,
|
||||
"activeAddress": "198.18.112.250"
|
||||
}
|
||||
}
|
||||
},
|
||||
"local": {
|
||||
"ipsecStateChecks": 102,
|
||||
"profileScripts": 8,
|
||||
"uniqueE2eAccepted": 14,
|
||||
"enhancedServerCardCases": 2,
|
||||
"initialWebServerTimeout": true,
|
||||
"initialGeneratedNextTypesErrors": true,
|
||||
"sourceTypeScriptPassed": true,
|
||||
"generatedNextTypesExcluded": true,
|
||||
"productionTypeScriptPassed": true,
|
||||
"eslintPassed": true
|
||||
},
|
||||
"browserEvidence": "browser-ipsec-alias-2026-10-10.json",
|
||||
"deployment": {
|
||||
"backendImage": "sha256:03e110dd414b575ad9a8f13f7b0302f241dbd3e439418c8ad1bbca7dc1c6fc9c",
|
||||
"frontendImage": "sha256:4bf4cad8b3c990a7259f84cf27fd6bb9ee34e3db904223b559c0559dbbe094a2",
|
||||
"revisionLabel": "alias112",
|
||||
"health": {
|
||||
"status": "ok",
|
||||
"timestamp": "2026-10-10T03:19:59.783Z",
|
||||
"version": "1.0.0-test.alias112",
|
||||
"eventLoopDelayMs": 20,
|
||||
"flowWorker": {
|
||||
"alive": false,
|
||||
"bound": false,
|
||||
"pendingSize": 0,
|
||||
"dropped": 0,
|
||||
"packetsReceived": 0
|
||||
}
|
||||
},
|
||||
"contextHashes": {
|
||||
"backend": {
|
||||
"backend/src/services/ipsec-live.ts": "7f5cccea14c63e96aa9774beab28257a9a81d624cc15a7ef88d19e17e25d5fd2",
|
||||
"backend/src/services/ipsec-state.test.ts": "8a0f19b3a16962a2217ac76bfd4c1009813f59cf9e50a4b90fb31165ff6a9a6d",
|
||||
"packages/contracts/src/ipsec.ts": "17f9fdcd528fba5fc5df539ca4392bdcd98d99957b1273e83c51537efa1630e5"
|
||||
},
|
||||
"frontend": {
|
||||
"app/(main)/ipsec/page.tsx": "2673411a60fd1796389ddbb6cba37a16b607af87fceedfc37e89e18717fd013e",
|
||||
"components/ipsec/ipsec-users-grid.tsx": "75a4f4c7f66badbc425669114982fbd067121e93ecf7800e02b3c8da83d80cfe",
|
||||
"components/ipsec/ipsec-server-grid.tsx": "c48e55cb0e63c9b7ca55f6277b194aa748bc7b40982459cdb9c4fe331df68011",
|
||||
"packages/contracts/src/ipsec.ts": "17f9fdcd528fba5fc5df539ca4392bdcd98d99957b1273e83c51537efa1630e5"
|
||||
}
|
||||
},
|
||||
"frontendInitialImage": "sha256:0cf246b79dd054e5ecb4ce692d82badc3324211615fb9313aaa7b6dbfc2881f9",
|
||||
"frontendTag": "ux-alias112-version",
|
||||
"frontendVersion": "1.0.0-test.alias112"
|
||||
},
|
||||
"limits": [
|
||||
"Single observed session claimed by several visible catalog clients is marked unknown",
|
||||
"Duplicate native IDs and one certificate referenced by several identities remain separate acceptance bounds",
|
||||
"No new data-plane throughput, full PKI/restore, client OS or IPv6 claim"
|
||||
]
|
||||
}
|
||||
Binary file not shown.
|
After Width: | Height: | Size: 140 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 55 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 141 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 55 KiB |
Reference in new issue
Block a user