Files
MikrotikManager/docs/ux-ui/acceptance/ipsec-certificate-dn-2026-10-10.json
T

1291 lines
42 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"date": "2026-10-10",
"block": "12.5.110",
"runtime": {
"backend": "ux-dn110",
"frontend": "ux-a11y101"
},
"preliminaryNativeAttempts": [
{
"file": "ipsec110-preliminary.json",
"report": {
"date": "2026-10-10",
"block": "12.5.110",
"name": "mm-ipsec110-1791598221062",
"cn": "mm-ipsec110-1791598221062, QA+Team=VPN",
"observations": [],
"cleanup": [
{
"serverId": 1,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
},
{
"serverId": 2,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
}
],
"databaseWrites": false,
"certificate": {
"name": "ipsec-user-mm-ipsec110-1791598221062",
"common-name": "mm-ipsec110-1791598221062, QA+Team=VPN",
"organization": "Example, Ltd",
"unit": "QA+Operations",
"country": "US",
"ca": "mm-ipsec110-1791598221062-ca",
"key-usage": "digital-signature,key-encipherment,tls-client"
},
"error": "RouterOS API error 400 on /ip/ipsec/profile: {\"detail\":\"unknown parameter comment\",\"error\":400,\"message\":\"Bad Request\"}"
}
},
{
"file": "ipsec110-preliminary2.json",
"report": {
"date": "2026-10-10",
"block": "12.5.110",
"name": "mm-ipsec110-1791598289113",
"cn": "mm-ipsec110-1791598289113, QA+Team=VPN",
"observations": [],
"cleanup": [
{
"serverId": 1,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
},
{
"serverId": 2,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
}
],
"databaseWrites": false,
"certificate": {
"name": "ipsec-user-mm-ipsec110-1791598289113",
"common-name": "mm-ipsec110-1791598289113, QA+Team=VPN",
"organization": "Example, Ltd",
"unit": "QA+Operations",
"country": "US",
"ca": "mm-ipsec110-1791598289113-ca",
"key-usage": "digital-signature,key-encipherment,tls-client"
},
"error": "RouterOS API error 400 on /ip/ipsec/mode-config: {\"detail\":\"unknown parameter address-prefix\",\"error\":400,\"message\":\"Bad Request\"}"
}
},
{
"file": "ipsec110-preliminary3.json",
"report": {
"date": "2026-10-10",
"block": "12.5.110",
"name": "mm-ipsec110-1791598344406",
"cn": "mm-ipsec110-1791598344406, QA+Team=VPN",
"observations": [
{
"serverId": 1,
"active": [],
"catalog": [
{
"name": "mm-ipsec110-1791598344406",
"commonName": "mm-ipsec110-1791598344406, QA+Team=VPN",
"certName": "ipsec-user-mm-ipsec110-1791598344406",
"online": false
}
]
},
{
"serverId": 2,
"active": [],
"catalog": []
}
],
"cleanup": [
{
"serverId": 1,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
},
{
"serverId": 2,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
}
],
"databaseWrites": false,
"certificate": {
"name": "ipsec-user-mm-ipsec110-1791598344406",
"common-name": "mm-ipsec110-1791598344406, QA+Team=VPN",
"organization": "Example, Ltd",
"unit": "QA+Operations",
"country": "US",
"ca": "mm-ipsec110-1791598344406-ca",
"key-usage": "digital-signature,key-encipherment,tls-client"
},
"error": "Complex DN session not established"
}
},
{
"file": "ipsec110-preliminary4.json",
"report": {
"date": "2026-10-10",
"block": "12.5.110",
"name": "mm-ipsec110-1791598444189",
"cn": "mm-ipsec110-1791598444189, QA+Team=VPN",
"observations": [
{
"serverId": 1,
"active": [],
"catalog": [
{
"name": "mm-ipsec110-1791598444189",
"commonName": "mm-ipsec110-1791598444189, QA+Team=VPN",
"certName": "ipsec-user-mm-ipsec110-1791598444189",
"online": false
}
]
},
{
"serverId": 2,
"active": [],
"catalog": []
}
],
"cleanup": [
{
"serverId": 1,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
},
{
"serverId": 2,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
}
],
"databaseWrites": false,
"certificate": {
"name": "ipsec-user-mm-ipsec110-1791598444189",
"common-name": "mm-ipsec110-1791598444189, QA+Team=VPN",
"organization": "Example, Ltd",
"unit": "QA+Operations",
"country": "US",
"ca": "mm-ipsec110-1791598444189-ca",
"key-usage": "digital-signature,key-encipherment,tls-client"
},
"error": "Complex DN session not established"
}
},
{
"file": "ipsec110-control.json",
"report": {
"date": "2026-10-10",
"block": "12.5.110",
"name": "mm-ipsec110-1791598597230",
"cn": "mm-ipsec110-1791598597230",
"observations": [
{
"serverId": 1,
"active": [],
"catalog": [
{
"name": "mm-ipsec110-1791598597230",
"commonName": "mm-ipsec110-1791598597230",
"certName": "ipsec-user-mm-ipsec110-1791598597230",
"online": false
}
]
},
{
"serverId": 2,
"active": [],
"catalog": []
}
],
"cleanup": [
{
"serverId": 1,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
},
{
"serverId": 2,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
}
],
"databaseWrites": false,
"certificate": {
"name": "ipsec-user-mm-ipsec110-1791598597230",
"common-name": "mm-ipsec110-1791598597230",
"ca": "mm-ipsec110-1791598597230-ca",
"key-usage": "digital-signature,key-encipherment,tls-client"
},
"error": "Complex DN session not established"
}
},
{
"file": "ipsec110-control-debug.json",
"report": {
"date": "2026-10-10",
"block": "12.5.110",
"name": "mm-ipsec110-1791598765912",
"cn": "mm-ipsec110-1791598765912",
"observations": [
{
"serverId": 1,
"active": [],
"catalog": [
{
"name": "mm-ipsec110-1791598765912",
"commonName": "mm-ipsec110-1791598765912",
"certName": "ipsec-user-mm-ipsec110-1791598765912",
"online": false
}
]
},
{
"serverId": 2,
"active": [],
"catalog": []
}
],
"cleanup": [
{
"serverId": 1,
"/system/logging": true,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
},
{
"serverId": 2,
"/system/logging": true,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
}
],
"databaseWrites": false,
"certificate": {
"name": "ipsec-user-mm-ipsec110-1791598765912",
"common-name": "mm-ipsec110-1791598765912",
"ca": "mm-ipsec110-1791598765912-ca",
"key-usage": "digital-signature,key-encipherment,tls-client"
},
"debug": [
{
"time": "2026-10-10 05:19:26",
"message": "generated CA certificate: mm-ipsec110-1791598765912-ca"
},
{
"time": "2026-10-10 05:19:28",
"message": "generated certificate 651A34B1F81F72A2:194.226.121.150::::::IP:194.226.121.150 rsa-size:2048 usage:80000005 valid:2 skid:29d6d9894d7634cbd887e32dc13d8ec690e9c9cb for CA mm-ipsec110-1791598765912-ca"
},
{
"time": "2026-10-10 05:19:28",
"message": "generated certificate 40122BB473E50D37:mm-ipsec110-1791598765912::::: rsa-size:2048 usage:40000005 valid:2 skid:9fa06d40a5939e8046f4fdb68f2d04c05826cc5d for CA mm-ipsec110-1791598765912-ca"
},
{
"time": "2026-10-10 05:19:30",
"message": "ipsec proposal mm-ipsec110-1791598765912 added by api:admin@:: (*1 = /ip ipsec proposal add auth-algorithms=sha256 enc-algorithms=aes-256-cbc name=mm-ipsec110-1791598765912 pfs-group=modp2048)"
}
],
"error": "Complex DN session not established"
}
},
{
"file": "ipsec110-control-diagnostic.json",
"report": {
"date": "2026-10-10",
"block": "12.5.110",
"name": "mm-ipsec110-1791598930518",
"cn": "mm-ipsec110-1791598930518",
"observations": [
{
"serverId": 1,
"active": [],
"catalog": [
{
"name": "mm-ipsec110-1791598930518",
"commonName": "mm-ipsec110-1791598930518",
"certName": "ipsec-user-mm-ipsec110-1791598930518",
"online": false
}
]
},
{
"serverId": 2,
"active": [],
"catalog": []
}
],
"cleanup": [
{
"serverId": 1,
"/system/logging": true,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
},
{
"serverId": 2,
"/system/logging": true,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
}
],
"databaseWrites": false,
"certificate": {
"name": "ipsec-user-mm-ipsec110-1791598930518",
"common-name": "mm-ipsec110-1791598930518",
"ca": "mm-ipsec110-1791598930518-ca",
"key-usage": "digital-signature,key-encipherment,tls-client"
},
"debug": [
[],
[
{
"time": "2026-10-10 04:14:31",
"message": "got fatal error: AUTHENTICATION_FAILED"
},
{
"time": "2026-10-10 04:14:41",
"message": "got fatal error: AUTHENTICATION_FAILED"
},
{
"time": "2026-10-10 04:14:51",
"message": "got fatal error: AUTHENTICATION_FAILED"
},
{
"time": "2026-10-10 04:16:44",
"message": "got fatal error: AUTHENTICATION_FAILED"
},
{
"time": "2026-10-10 04:16:54",
"message": "got fatal error: AUTHENTICATION_FAILED"
},
{
"time": "2026-10-10 04:17:04",
"message": "got fatal error: AUTHENTICATION_FAILED"
},
{
"time": "2026-10-10 04:17:15",
"message": "got fatal error: AUTHENTICATION_FAILED"
},
{
"time": "2026-10-10 04:17:25",
"message": "got fatal error: AUTHENTICATION_FAILED"
},
{
"time": "2026-10-10 04:19:30",
"message": "initiator can't find identity for peer: mm-ipsec110-1791598765912"
},
{
"time": "2026-10-10 04:19:41",
"message": "got fatal error: AUTHENTICATION_FAILED"
},
{
"time": "2026-10-10 04:19:51",
"message": "got fatal error: AUTHENTICATION_FAILED"
},
{
"time": "2026-10-10 04:22:17",
"message": "mm-ipsec110-1791598930518: => auth nonce (size 0x18)"
},
{
"time": "2026-10-10 04:22:17",
"message": "mm-ipsec110-1791598930518: => my auth (size 0x0)"
},
{
"time": "2026-10-10 04:22:17",
"message": "got fatal error: AUTHENTICATION_FAILED"
},
{
"time": "2026-10-10 04:22:27",
"message": "mm-ipsec110-1791598930518: => auth nonce (size 0x18)"
},
{
"time": "2026-10-10 04:22:27",
"message": "mm-ipsec110-1791598930518: => my auth (size 0x0)"
},
{
"time": "2026-10-10 04:22:27",
"message": "got fatal error: AUTHENTICATION_FAILED"
},
{
"time": "2026-10-10 04:22:37",
"message": "mm-ipsec110-1791598930518: => auth nonce (size 0x18)"
},
{
"time": "2026-10-10 04:22:37",
"message": "mm-ipsec110-1791598930518: => my auth (size 0x0)"
},
{
"time": "2026-10-10 04:22:37",
"message": "got fatal error: AUTHENTICATION_FAILED"
}
]
],
"certificates": [
[
{
"name": "mm-ipsec110-1791598930518-ca",
"trusted": "true",
"trust-store": "all",
"invalid-before": "2026-10-10 05:22:12",
"invalid-after": "2026-10-12 05:22:12",
"common-name": "mm-ipsec110-1791598930518-CA"
},
{
"name": "mm-ipsec110-1791598930518-server",
"trusted": "false",
"trust-store": "all",
"ca": "mm-ipsec110-1791598930518-ca",
"invalid-before": "2026-10-10 05:22:12",
"invalid-after": "2026-10-12 05:22:12",
"common-name": "194.226.121.150"
},
{
"name": "ipsec-user-mm-ipsec110-1791598930518",
"trusted": "false",
"trust-store": "all",
"ca": "mm-ipsec110-1791598930518-ca",
"invalid-before": "2026-10-10 05:22:13",
"invalid-after": "2026-10-12 05:22:13",
"common-name": "mm-ipsec110-1791598930518"
}
],
[
{
"name": "mm-ipsec110-1791598930518-import",
"trusted": "true",
"trust-store": "ipsec",
"invalid-before": "2026-10-10 04:22:13",
"invalid-after": "2026-10-12 04:22:13",
"common-name": "mm-ipsec110-1791598930518"
},
{
"name": "mm-ipsec110-1791598930518-import",
"trusted": "true",
"trust-store": "ipsec",
"invalid-before": "2026-10-10 04:22:12",
"invalid-after": "2026-10-12 04:22:12",
"common-name": "mm-ipsec110-1791598930518-CA"
}
]
],
"error": "Complex DN session not established"
}
}
],
"beforeFix": {
"complex": {
"date": "2026-10-10",
"block": "12.5.110",
"name": "mm-ipsec110-1791599034879",
"cn": "mm-ipsec110-1791599034879, QA+Team=VPN",
"observations": [
{
"serverId": 1,
"active": [
{
".id": "*1",
"id": "C=US, O=Example, Ltd, OU=QA+Operations, CN=mm-ipsec110-1791599034879, QA+Team=VPN",
"state": "established",
"dynamic-address": "198.18.110.250",
"remote-address": "104.165.244.7",
"uptime": "1s"
}
],
"catalog": [
{
"name": "mm-ipsec110-1791599034879",
"commonName": "mm-ipsec110-1791599034879, QA+Team=VPN",
"certName": "ipsec-user-mm-ipsec110-1791599034879",
"online": false
}
]
},
{
"serverId": 2,
"active": [
{
".id": "*1",
"id": "194.226.121.150",
"state": "established",
"remote-address": "194.226.121.150",
"uptime": "1s"
}
],
"catalog": []
}
],
"cleanup": [
{
"serverId": 1,
"/system/logging": true,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
},
{
"serverId": 2,
"/system/logging": true,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
}
],
"databaseWrites": false,
"certificate": {
"name": "ipsec-user-mm-ipsec110-1791599034879",
"common-name": "mm-ipsec110-1791599034879, QA+Team=VPN",
"organization": "Example, Ltd",
"unit": "QA+Operations",
"country": "US",
"ca": "mm-ipsec110-1791599034879-ca",
"key-usage": "digital-signature,key-encipherment,tls-client"
},
"debug": [
[
{
"time": "2026-10-10 05:24:03",
"message": "mm-ipsec110-1791599034879: => certificate (size 0x381)"
},
{
"time": "2026-10-10 05:24:03",
"message": "mm-ipsec110-1791599034879: => peer's auth (size 0x100)"
},
{
"time": "2026-10-10 05:24:03",
"message": "mm-ipsec110-1791599034879: => auth nonce (size 0x18)"
},
{
"time": "2026-10-10 05:24:03",
"message": "peer authorized: mm-ipsec110-1791599034879 104.165.244.7-194.226.121.150 8b32523df8e1e6da:cefc293a7eb1e7fa"
},
{
"time": "2026-10-10 05:24:03",
"message": "mm-ipsec110-1791599034879: => auth nonce (size 0x18)"
},
{
"time": "2026-10-10 05:24:03",
"message": "mm-ipsec110-1791599034879: => my auth (size 0x100)"
}
],
[
{
"time": "2026-10-10 04:22:17",
"message": "got fatal error: AUTHENTICATION_FAILED"
},
{
"time": "2026-10-10 04:22:27",
"message": "mm-ipsec110-1791598930518: => auth nonce (size 0x18)"
},
{
"time": "2026-10-10 04:22:27",
"message": "mm-ipsec110-1791598930518: => my auth (size 0x0)"
},
{
"time": "2026-10-10 04:22:27",
"message": "got fatal error: AUTHENTICATION_FAILED"
},
{
"time": "2026-10-10 04:22:37",
"message": "mm-ipsec110-1791598930518: => auth nonce (size 0x18)"
},
{
"time": "2026-10-10 04:22:37",
"message": "mm-ipsec110-1791598930518: => my auth (size 0x0)"
},
{
"time": "2026-10-10 04:22:37",
"message": "got fatal error: AUTHENTICATION_FAILED"
},
{
"time": "2026-10-10 04:24:03",
"message": "mm-ipsec110-1791599034879: => auth nonce (size 0x18)"
},
{
"time": "2026-10-10 04:24:03",
"message": "mm-ipsec110-1791599034879: => my auth (size 0x100)"
},
{
"time": "2026-10-10 04:24:04",
"message": "mm-ipsec110-1791599034879: => certificate (size 0x33f)"
},
{
"time": "2026-10-10 04:24:04",
"message": "mm-ipsec110-1791599034879: => peer's auth (size 0x100)"
},
{
"time": "2026-10-10 04:24:04",
"message": "mm-ipsec110-1791599034879: => auth nonce (size 0x18)"
},
{
"time": "2026-10-10 04:24:04",
"message": "peer authorized: mm-ipsec110-1791599034879 104.165.244.7-194.226.121.150 8b32523df8e1e6da:cefc293a7eb1e7fa"
}
]
],
"certificates": [
[
{
"name": "mm-ipsec110-1791599034879-ca",
"trusted": "true",
"trust-store": "all",
"invalid-before": "2026-10-10 05:23:56",
"invalid-after": "2026-10-12 05:23:56",
"common-name": "mm-ipsec110-1791599034879-CA"
},
{
"name": "mm-ipsec110-1791599034879-server",
"trusted": "false",
"trust-store": "all",
"ca": "mm-ipsec110-1791599034879-ca",
"invalid-before": "2026-10-10 05:23:58",
"invalid-after": "2026-10-12 05:23:58",
"common-name": "194.226.121.150"
},
{
"name": "ipsec-user-mm-ipsec110-1791599034879",
"trusted": "false",
"trust-store": "all",
"ca": "mm-ipsec110-1791599034879-ca",
"invalid-before": "2026-10-10 05:24:00",
"invalid-after": "2026-10-12 05:24:00",
"common-name": "mm-ipsec110-1791599034879, QA+Team=VPN"
}
],
[
{
"name": "mm-ipsec110-1791599034879-client-imported",
"trusted": "true",
"trust-store": "ipsec",
"invalid-before": "2026-10-10 04:24:00",
"invalid-after": "2026-10-12 04:24:00",
"common-name": "mm-ipsec110-1791599034879, QA+Team=VPN"
},
{
"name": "mm-ipsec110-1791599034879-ca-imported",
"trusted": "true",
"trust-store": "ipsec",
"invalid-before": "2026-10-10 04:23:56",
"invalid-after": "2026-10-12 04:23:56",
"common-name": "mm-ipsec110-1791599034879-CA"
}
]
],
"catalogCorrect": false
},
"fullSubject": {
"date": "2026-10-10",
"block": "12.5.110",
"name": "mm-ipsec110-1791599279541",
"cn": "mm-ipsec110-1791599279541, QA+Team=\"VPN\"\\Lab",
"observations": [
{
"serverId": 1,
"active": [
{
".id": "*1",
"id": "C=US, S=New York, L=Albany, O=Example, Ltd, OU=QA+Operations, CN=mm-ipsec110-1791599279541, QA+Team=\"VPN\"\\Lab",
"state": "established",
"dynamic-address": "198.18.110.250",
"remote-address": "104.165.244.7",
"uptime": "1s"
}
],
"catalog": [
{
"name": "mm-ipsec110-1791599279541",
"commonName": "mm-ipsec110-1791599279541, QA+Team=\"VPN\"\\Lab",
"certName": "ipsec-user-mm-ipsec110-1791599279541",
"online": false
}
]
},
{
"serverId": 2,
"active": [
{
".id": "*1",
"id": "194.226.121.150",
"state": "established",
"remote-address": "194.226.121.150",
"uptime": "1s"
}
],
"catalog": []
}
],
"cleanup": [
{
"serverId": 1,
"/system/logging": true,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
},
{
"serverId": 2,
"/system/logging": true,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
}
],
"databaseWrites": false,
"certificate": {
"name": "ipsec-user-mm-ipsec110-1791599279541",
"common-name": "mm-ipsec110-1791599279541, QA+Team=\"VPN\"\\Lab",
"organization": "Example, Ltd",
"unit": "QA+Operations",
"country": "US",
"state": "New York",
"locality": "Albany",
"ca": "mm-ipsec110-1791599279541-ca",
"key-usage": "digital-signature,key-encipherment,tls-client"
},
"debug": [
[
{
"time": "2026-10-10 05:24:03",
"message": "mm-ipsec110-1791599034879: => certificate (size 0x381)"
},
{
"time": "2026-10-10 05:24:03",
"message": "mm-ipsec110-1791599034879: => peer's auth (size 0x100)"
},
{
"time": "2026-10-10 05:24:03",
"message": "mm-ipsec110-1791599034879: => auth nonce (size 0x18)"
},
{
"time": "2026-10-10 05:24:03",
"message": "peer authorized: mm-ipsec110-1791599034879 104.165.244.7-194.226.121.150 8b32523df8e1e6da:cefc293a7eb1e7fa"
},
{
"time": "2026-10-10 05:24:03",
"message": "mm-ipsec110-1791599034879: => auth nonce (size 0x18)"
},
{
"time": "2026-10-10 05:24:03",
"message": "mm-ipsec110-1791599034879: => my auth (size 0x100)"
},
{
"time": "2026-10-10 05:28:07",
"message": "mm-ipsec110-1791599279541: => certificate (size 0x3ac)"
},
{
"time": "2026-10-10 05:28:07",
"message": "mm-ipsec110-1791599279541: => peer's auth (size 0x100)"
},
{
"time": "2026-10-10 05:28:07",
"message": "mm-ipsec110-1791599279541: => auth nonce (size 0x18)"
},
{
"time": "2026-10-10 05:28:07",
"message": "peer authorized: mm-ipsec110-1791599279541 104.165.244.7-194.226.121.150 c955a36f68061a2b:de97c72421f9d773"
},
{
"time": "2026-10-10 05:28:07",
"message": "mm-ipsec110-1791599279541: => auth nonce (size 0x18)"
},
{
"time": "2026-10-10 05:28:07",
"message": "mm-ipsec110-1791599279541: => my auth (size 0x100)"
}
],
[
{
"time": "2026-10-10 04:24:03",
"message": "mm-ipsec110-1791599034879: => auth nonce (size 0x18)"
},
{
"time": "2026-10-10 04:24:03",
"message": "mm-ipsec110-1791599034879: => my auth (size 0x100)"
},
{
"time": "2026-10-10 04:24:04",
"message": "mm-ipsec110-1791599034879: => certificate (size 0x33f)"
},
{
"time": "2026-10-10 04:24:04",
"message": "mm-ipsec110-1791599034879: => peer's auth (size 0x100)"
},
{
"time": "2026-10-10 04:24:04",
"message": "mm-ipsec110-1791599034879: => auth nonce (size 0x18)"
},
{
"time": "2026-10-10 04:24:04",
"message": "peer authorized: mm-ipsec110-1791599034879 104.165.244.7-194.226.121.150 8b32523df8e1e6da:cefc293a7eb1e7fa"
},
{
"time": "2026-10-10 04:28:07",
"message": "mm-ipsec110-1791599279541: => auth nonce (size 0x18)"
},
{
"time": "2026-10-10 04:28:07",
"message": "mm-ipsec110-1791599279541: => my auth (size 0x100)"
},
{
"time": "2026-10-10 04:28:07",
"message": "mm-ipsec110-1791599279541: => certificate (size 0x33f)"
},
{
"time": "2026-10-10 04:28:07",
"message": "mm-ipsec110-1791599279541: => peer's auth (size 0x100)"
},
{
"time": "2026-10-10 04:28:07",
"message": "mm-ipsec110-1791599279541: => auth nonce (size 0x18)"
},
{
"time": "2026-10-10 04:28:07",
"message": "peer authorized: mm-ipsec110-1791599279541 104.165.244.7-194.226.121.150 c955a36f68061a2b:de97c72421f9d773"
}
]
],
"certificates": [
[
{
"name": "mm-ipsec110-1791599279541-ca",
"trusted": "true",
"trust-store": "all",
"invalid-before": "2026-10-10 05:28:01",
"invalid-after": "2026-10-12 05:28:01",
"common-name": "mm-ipsec110-1791599279541-CA"
},
{
"name": "mm-ipsec110-1791599279541-server",
"trusted": "false",
"trust-store": "all",
"ca": "mm-ipsec110-1791599279541-ca",
"invalid-before": "2026-10-10 05:28:02",
"invalid-after": "2026-10-12 05:28:02",
"common-name": "194.226.121.150"
},
{
"name": "ipsec-user-mm-ipsec110-1791599279541",
"trusted": "false",
"trust-store": "all",
"ca": "mm-ipsec110-1791599279541-ca",
"invalid-before": "2026-10-10 05:28:03",
"invalid-after": "2026-10-12 05:28:03",
"common-name": "mm-ipsec110-1791599279541, QA+Team=\"VPN\"\\Lab"
}
],
[
{
"name": "mm-ipsec110-1791599279541-client-imported",
"trusted": "true",
"trust-store": "ipsec",
"invalid-before": "2026-10-10 04:28:03",
"invalid-after": "2026-10-12 04:28:03",
"common-name": "mm-ipsec110-1791599279541, QA+Team=\"VPN\"\\Lab"
},
{
"name": "mm-ipsec110-1791599279541-ca-imported",
"trusted": "true",
"trust-store": "ipsec",
"invalid-before": "2026-10-10 04:28:01",
"invalid-after": "2026-10-12 04:28:01",
"common-name": "mm-ipsec110-1791599279541-CA"
}
]
],
"catalogCorrect": false
}
},
"accepted": {
"date": "2026-10-10",
"block": "12.5.110",
"name": "mm-ipsec110-1791599881177",
"cn": "mm-ipsec110-1791599881177, QA+Team=\"VPN\"\\Lab",
"observations": [
{
"serverId": 1,
"active": [
{
".id": "*1",
"id": "C=US, S=New York, L=Albany, O=Example, Ltd, OU=QA+Operations, CN=mm-ipsec110-1791599881177, QA+Team=\"VPN\"\\Lab",
"state": "established",
"dynamic-address": "198.18.110.250",
"remote-address": "104.165.244.7",
"uptime": "1s"
}
],
"catalog": [
{
"name": "mm-ipsec110-1791599881177",
"commonName": "mm-ipsec110-1791599881177, QA+Team=\"VPN\"\\Lab",
"certName": "ipsec-user-mm-ipsec110-1791599881177",
"online": true,
"activeAddress": "198.18.110.250"
}
]
},
{
"serverId": 2,
"active": [
{
".id": "*1",
"id": "194.226.121.150",
"state": "established",
"remote-address": "194.226.121.150",
"uptime": "1s"
}
],
"catalog": []
}
],
"cleanup": [
{
"serverId": 1,
"/system/logging": true,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
},
{
"serverId": 2,
"/system/logging": true,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
}
],
"databaseWrites": false,
"certificate": {
"name": "ipsec-user-mm-ipsec110-1791599881177",
"common-name": "mm-ipsec110-1791599881177, QA+Team=\"VPN\"\\Lab",
"organization": "Example, Ltd",
"unit": "QA+Operations",
"country": "US",
"state": "New York",
"locality": "Albany",
"ca": "mm-ipsec110-1791599881177-ca",
"key-usage": "digital-signature,key-encipherment,tls-client"
},
"certificates": [
[
{
"name": "mm-ipsec110-1791599881177-ca",
"trusted": "true",
"trust-store": "all",
"invalid-before": "2026-10-10 05:38:02",
"invalid-after": "2026-10-12 05:38:02",
"common-name": "mm-ipsec110-1791599881177-CA"
},
{
"name": "mm-ipsec110-1791599881177-server",
"trusted": "false",
"trust-store": "all",
"ca": "mm-ipsec110-1791599881177-ca",
"invalid-before": "2026-10-10 05:38:03",
"invalid-after": "2026-10-12 05:38:03",
"common-name": "194.226.121.150"
},
{
"name": "ipsec-user-mm-ipsec110-1791599881177",
"trusted": "false",
"trust-store": "all",
"ca": "mm-ipsec110-1791599881177-ca",
"invalid-before": "2026-10-10 05:38:04",
"invalid-after": "2026-10-12 05:38:04",
"common-name": "mm-ipsec110-1791599881177, QA+Team=\"VPN\"\\Lab"
}
],
[
{
"name": "mm-ipsec110-1791599881177-client-imported",
"trusted": "true",
"trust-store": "ipsec",
"invalid-before": "2026-10-10 04:38:04",
"invalid-after": "2026-10-12 04:38:04",
"common-name": "mm-ipsec110-1791599881177, QA+Team=\"VPN\"\\Lab"
},
{
"name": "mm-ipsec110-1791599881177-ca-imported",
"trusted": "true",
"trust-store": "ipsec",
"invalid-before": "2026-10-10 04:38:02",
"invalid-after": "2026-10-12 04:38:02",
"common-name": "mm-ipsec110-1791599881177-CA"
}
]
],
"catalogCorrect": true
},
"preliminaryBrowser": {
"incorrectStorageKey": {
"report": {
"date": "2026-10-10",
"runtime": {
"backend": "ux-dn110",
"frontend": "ux-a11y101"
},
"httpMocks": false,
"cases": [
{
"theme": "dark",
"width": 1280,
"onlineAddressConfirmed": true,
"reloadConfirmed": true,
"noPageOverflow": true
},
{
"theme": "dark",
"width": 320,
"onlineAddressConfirmed": true,
"reloadConfirmed": true,
"noPageOverflow": true
},
{
"theme": "light",
"width": 1280,
"onlineAddressConfirmed": true,
"reloadConfirmed": true,
"noPageOverflow": true
},
{
"theme": "light",
"width": 320,
"onlineAddressConfirmed": true,
"reloadConfirmed": true,
"noPageOverflow": true
}
],
"pageErrors": [],
"applicationWrites": [],
"scope": "Real established certificate DN client status/address, reload, desktop/mobile, two themes"
},
"acceptedThemes": false,
"reason": "Helper used theme instead of rl-theme; these cases do not prove light theme"
},
"detachedLocator": {
"date": "2026-10-10",
"error": "locator.scrollIntoViewIfNeeded: Element is not attached to the DOM",
"nativeAcceptance": true,
"cleanupPassed": true,
"resolution": "Reacquire the read-only locator on refresh, bounded 10s; no mutation retry"
}
},
"browserEvidence": "browser-ipsec-dn-2026-10-10.json",
"deployment": {
"imageId": "sha256:f0cd7afc7391ac463c8b3c7d183b0c294f01ffca6beda3d240d26bec59c06d72",
"tag": "ux-dn110",
"revisionLabel": "dn110",
"health": {
"status": "ok",
"timestamp": "2026-10-10T02:34:19.932Z",
"version": "1.0.0-test.dn110",
"eventLoopDelayMs": 20,
"flowWorker": {
"alive": false,
"bound": false,
"pendingSize": 0,
"dropped": 0,
"packetsReceived": 0
}
}
},
"limits": [
"RouterOS7.24.5 subject presentation confirmed; not a general ASN.1/RFC4514 parser",
"Native certificate matching/assigned address/UI status accepted; data-plane encryption was accepted in77–82, not re-tested here",
"Custom OIDs, alternate IKE ID namespaces, client OS, full PKI/restore/IPv6 remain open"
]
}