topic Re: change kernel parameter fails in Firewall and Security Management

change kernel parameter fails

iko — Sun, 15 Aug 2021 10:49:13 GMT

Hi,

I need to enable TLS1.3 on my R81 Security Gateway, which is a standalone VM with management gateway installed as well.

But I have no such fwkern.conf file.

But operation fails with:

[Expert@gw-a7234c:0]# fw ctl set int fwtls_enable_tlsio 1

Set operation failed: failed to get parameter fwtls_enable_tlsio

set: Operation failed

Killed

Can someone tell me what am I doing wrong?

Thank you, Iko

iko — Sun, 15 Aug 2021 10:51:17 GMT

btw, the get works:

[Expert@gw-a7234c:0]# fw ctl get int fwtls_enable_tlsio
fwtls_enable_tlsio = 0

iko — Sun, 15 Aug 2021 11:25:13 GMT

I solved it by creating the fwkern.conf file manually and added the entry:

fwtls_enable_tlsio=0x1

Thanks for the attention.

Iko

Václav_Brožík — Thu, 19 May 2022 08:49:41 GMT

Some kernel parameters cannot be set at run-time. They can be set only during the module initialization from fwkern.conf.