Activate use of https for Jail

[MZRR]

Hi,

I'm running a nextcloud Jail which I installed from the provided plugin of the newest freenas version. When connecting to the Jail with SSH I'm not able to use https:// and thus can't, for example, clone a git repo.

I have IPv6 and a working IPv4 and v6 adresse assigned in my network. This is my ifconfig

Code:

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
        options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
        inet6 ::1 prefixlen 128
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
        inet 127.0.0.1 netmask 0xff000000
        nd6 options=23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL>
        groups: lo
epair0b: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=8<VLAN_MTU>
        ether 70:85:c2:ba:b5:82
        hwaddr 02:31:d0:00:05:0b
        inet 192.168.178.67 netmask 0x80000000 broadcast 255.255.255.255
        inet6 fe80::7285:c2ff:feba:b582%epair0b prefixlen 64 scopeid 0x2
        inet6 2a02:8070:879b:1a00:7285:c2ff:feba:b582 prefixlen 64 autoconf
        nd6 options=23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL>
        media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
        status: active
        groups: epair

Thanks!

 

[Jailer]

Run pkg install ca_root_nss in the jail and try again.

 

[MZRR]

Thanks, but

The most recent versions of packages are already installed

 

[danb35]

When connecting to the Jail with SSH I'm not able to use https://

What exactly do you mean by this? What happens when you try?

 

[MZRR]

I simply run into a timeout while trying to fetch something from github.

I have a pi-hole running. For the time being i have set the google IPv6 DNS 2001:4860:4860::8888 as the nameserver in resolv.conf

 

[danb35]

I simply run into a timeout while trying to fetch something from github.

Can you fetch anything else? Retrieve material via HTTP? There isn't anything in a jail as such that would prevent you from making HTTPS connections, so the issue is likely elsewhere.

 

[MZRR]

I cant fetcha anything even with http but ping works:

Code:

 ping6 -c4 www.google.com
PING6(56=40+8+8 bytes) xxxx:xxxx:xxxx:xxxx:xxxx:xxxx --> xxxx:xxxx:xxxx:xxxx::xxxx
16 bytes from 2a00:1450:4001:81e::2004, icmp_seq=0 hlim=54 time=26.515 ms
16 bytes from 2a00:1450:4001:81e::2004, icmp_seq=1 hlim=54 time=37.791 ms
16 bytes from 2a00:1450:4001:81e::2004, icmp_seq=2 hlim=54 time=30.445 ms
16 bytes from 2a00:1450:4001:81e::2004, icmp_seq=3 hlim=54 time=24.164 ms

--- www.google.com ping6 statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 24.164/29.729/37.791/5.167 ms