{ "date": "2026-10-10", "block": "12.5.110", "runtime": { "backend": "ux-dn110", "frontend": "ux-a11y101" }, "preliminaryNativeAttempts": [ { "file": "ipsec110-preliminary.json", "report": { "date": "2026-10-10", "block": "12.5.110", "name": "mm-ipsec110-1791598221062", "cn": "mm-ipsec110-1791598221062, QA+Team=VPN", "observations": [], "cleanup": [ { "serverId": 1, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true }, { "serverId": 2, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true } ], "databaseWrites": false, "certificate": { "name": "ipsec-user-mm-ipsec110-1791598221062", "common-name": "mm-ipsec110-1791598221062, QA+Team=VPN", "organization": "Example, Ltd", "unit": "QA+Operations", "country": "US", "ca": "mm-ipsec110-1791598221062-ca", "key-usage": "digital-signature,key-encipherment,tls-client" }, "error": "RouterOS API error 400 on /ip/ipsec/profile: {\"detail\":\"unknown parameter comment\",\"error\":400,\"message\":\"Bad Request\"}" } }, { "file": "ipsec110-preliminary2.json", "report": { "date": "2026-10-10", "block": "12.5.110", "name": "mm-ipsec110-1791598289113", "cn": "mm-ipsec110-1791598289113, QA+Team=VPN", "observations": [], "cleanup": [ { "serverId": 1, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true }, { "serverId": 2, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true } ], "databaseWrites": false, "certificate": { "name": "ipsec-user-mm-ipsec110-1791598289113", "common-name": "mm-ipsec110-1791598289113, QA+Team=VPN", "organization": "Example, Ltd", "unit": "QA+Operations", "country": "US", "ca": "mm-ipsec110-1791598289113-ca", "key-usage": "digital-signature,key-encipherment,tls-client" }, "error": "RouterOS API error 400 on /ip/ipsec/mode-config: {\"detail\":\"unknown parameter address-prefix\",\"error\":400,\"message\":\"Bad Request\"}" } }, { "file": "ipsec110-preliminary3.json", "report": { "date": "2026-10-10", "block": "12.5.110", "name": "mm-ipsec110-1791598344406", "cn": "mm-ipsec110-1791598344406, QA+Team=VPN", "observations": [ { "serverId": 1, "active": [], "catalog": [ { "name": "mm-ipsec110-1791598344406", "commonName": "mm-ipsec110-1791598344406, QA+Team=VPN", "certName": "ipsec-user-mm-ipsec110-1791598344406", "online": false } ] }, { "serverId": 2, "active": [], "catalog": [] } ], "cleanup": [ { "serverId": 1, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true }, { "serverId": 2, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true } ], "databaseWrites": false, "certificate": { "name": "ipsec-user-mm-ipsec110-1791598344406", "common-name": "mm-ipsec110-1791598344406, QA+Team=VPN", "organization": "Example, Ltd", "unit": "QA+Operations", "country": "US", "ca": "mm-ipsec110-1791598344406-ca", "key-usage": "digital-signature,key-encipherment,tls-client" }, "error": "Complex DN session not established" } }, { "file": "ipsec110-preliminary4.json", "report": { "date": "2026-10-10", "block": "12.5.110", "name": "mm-ipsec110-1791598444189", "cn": "mm-ipsec110-1791598444189, QA+Team=VPN", "observations": [ { "serverId": 1, "active": [], "catalog": [ { "name": "mm-ipsec110-1791598444189", "commonName": "mm-ipsec110-1791598444189, QA+Team=VPN", "certName": "ipsec-user-mm-ipsec110-1791598444189", "online": false } ] }, { "serverId": 2, "active": [], "catalog": [] } ], "cleanup": [ { "serverId": 1, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true }, { "serverId": 2, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true } ], "databaseWrites": false, "certificate": { "name": "ipsec-user-mm-ipsec110-1791598444189", "common-name": "mm-ipsec110-1791598444189, QA+Team=VPN", "organization": "Example, Ltd", "unit": "QA+Operations", "country": "US", "ca": "mm-ipsec110-1791598444189-ca", "key-usage": "digital-signature,key-encipherment,tls-client" }, "error": "Complex DN session not established" } }, { "file": "ipsec110-control.json", "report": { "date": "2026-10-10", "block": "12.5.110", "name": "mm-ipsec110-1791598597230", "cn": "mm-ipsec110-1791598597230", "observations": [ { "serverId": 1, "active": [], "catalog": [ { "name": "mm-ipsec110-1791598597230", "commonName": "mm-ipsec110-1791598597230", "certName": "ipsec-user-mm-ipsec110-1791598597230", "online": false } ] }, { "serverId": 2, "active": [], "catalog": [] } ], "cleanup": [ { "serverId": 1, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true }, { "serverId": 2, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true } ], "databaseWrites": false, "certificate": { "name": "ipsec-user-mm-ipsec110-1791598597230", "common-name": "mm-ipsec110-1791598597230", "ca": "mm-ipsec110-1791598597230-ca", "key-usage": "digital-signature,key-encipherment,tls-client" }, "error": "Complex DN session not established" } }, { "file": "ipsec110-control-debug.json", "report": { "date": "2026-10-10", "block": "12.5.110", "name": "mm-ipsec110-1791598765912", "cn": "mm-ipsec110-1791598765912", "observations": [ { "serverId": 1, "active": [], "catalog": [ { "name": "mm-ipsec110-1791598765912", "commonName": "mm-ipsec110-1791598765912", "certName": "ipsec-user-mm-ipsec110-1791598765912", "online": false } ] }, { "serverId": 2, "active": [], "catalog": [] } ], "cleanup": [ { "serverId": 1, "/system/logging": true, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true }, { "serverId": 2, "/system/logging": true, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true } ], "databaseWrites": false, "certificate": { "name": "ipsec-user-mm-ipsec110-1791598765912", "common-name": "mm-ipsec110-1791598765912", "ca": "mm-ipsec110-1791598765912-ca", "key-usage": "digital-signature,key-encipherment,tls-client" }, "debug": [ { "time": "2026-10-10 05:19:26", "message": "generated CA certificate: mm-ipsec110-1791598765912-ca" }, { "time": "2026-10-10 05:19:28", "message": "generated certificate 651A34B1F81F72A2:194.226.121.150::::::IP:194.226.121.150 rsa-size:2048 usage:80000005 valid:2 skid:29d6d9894d7634cbd887e32dc13d8ec690e9c9cb for CA mm-ipsec110-1791598765912-ca" }, { "time": "2026-10-10 05:19:28", "message": "generated certificate 40122BB473E50D37:mm-ipsec110-1791598765912::::: rsa-size:2048 usage:40000005 valid:2 skid:9fa06d40a5939e8046f4fdb68f2d04c05826cc5d for CA mm-ipsec110-1791598765912-ca" }, { "time": "2026-10-10 05:19:30", "message": "ipsec proposal mm-ipsec110-1791598765912 added by api:admin@:: (*1 = /ip ipsec proposal add auth-algorithms=sha256 enc-algorithms=aes-256-cbc name=mm-ipsec110-1791598765912 pfs-group=modp2048)" } ], "error": "Complex DN session not established" } }, { "file": "ipsec110-control-diagnostic.json", "report": { "date": "2026-10-10", "block": "12.5.110", "name": "mm-ipsec110-1791598930518", "cn": "mm-ipsec110-1791598930518", "observations": [ { "serverId": 1, "active": [], "catalog": [ { "name": "mm-ipsec110-1791598930518", "commonName": "mm-ipsec110-1791598930518", "certName": "ipsec-user-mm-ipsec110-1791598930518", "online": false } ] }, { "serverId": 2, "active": [], "catalog": [] } ], "cleanup": [ { "serverId": 1, "/system/logging": true, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true }, { "serverId": 2, "/system/logging": true, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true } ], "databaseWrites": false, "certificate": { "name": "ipsec-user-mm-ipsec110-1791598930518", "common-name": "mm-ipsec110-1791598930518", "ca": "mm-ipsec110-1791598930518-ca", "key-usage": "digital-signature,key-encipherment,tls-client" }, "debug": [ [], [ { "time": "2026-10-10 04:14:31", "message": "got fatal error: AUTHENTICATION_FAILED" }, { "time": "2026-10-10 04:14:41", "message": "got fatal error: AUTHENTICATION_FAILED" }, { "time": "2026-10-10 04:14:51", "message": "got fatal error: AUTHENTICATION_FAILED" }, { "time": "2026-10-10 04:16:44", "message": "got fatal error: AUTHENTICATION_FAILED" }, { "time": "2026-10-10 04:16:54", "message": "got fatal error: AUTHENTICATION_FAILED" }, { "time": "2026-10-10 04:17:04", "message": "got fatal error: AUTHENTICATION_FAILED" }, { "time": "2026-10-10 04:17:15", "message": "got fatal error: AUTHENTICATION_FAILED" }, { "time": "2026-10-10 04:17:25", "message": "got fatal error: AUTHENTICATION_FAILED" }, { "time": "2026-10-10 04:19:30", "message": "initiator can't find identity for peer: mm-ipsec110-1791598765912" }, { "time": "2026-10-10 04:19:41", "message": "got fatal error: AUTHENTICATION_FAILED" }, { "time": "2026-10-10 04:19:51", "message": "got fatal error: AUTHENTICATION_FAILED" }, { "time": "2026-10-10 04:22:17", "message": "mm-ipsec110-1791598930518: => auth nonce (size 0x18)" }, { "time": "2026-10-10 04:22:17", "message": "mm-ipsec110-1791598930518: => my auth (size 0x0)" }, { "time": "2026-10-10 04:22:17", "message": "got fatal error: AUTHENTICATION_FAILED" }, { "time": "2026-10-10 04:22:27", "message": "mm-ipsec110-1791598930518: => auth nonce (size 0x18)" }, { "time": "2026-10-10 04:22:27", "message": "mm-ipsec110-1791598930518: => my auth (size 0x0)" }, { "time": "2026-10-10 04:22:27", "message": "got fatal error: AUTHENTICATION_FAILED" }, { "time": "2026-10-10 04:22:37", "message": "mm-ipsec110-1791598930518: => auth nonce (size 0x18)" }, { "time": "2026-10-10 04:22:37", "message": "mm-ipsec110-1791598930518: => my auth (size 0x0)" }, { "time": "2026-10-10 04:22:37", "message": "got fatal error: AUTHENTICATION_FAILED" } ] ], "certificates": [ [ { "name": "mm-ipsec110-1791598930518-ca", "trusted": "true", "trust-store": "all", "invalid-before": "2026-10-10 05:22:12", "invalid-after": "2026-10-12 05:22:12", "common-name": "mm-ipsec110-1791598930518-CA" }, { "name": "mm-ipsec110-1791598930518-server", "trusted": "false", "trust-store": "all", "ca": "mm-ipsec110-1791598930518-ca", "invalid-before": "2026-10-10 05:22:12", "invalid-after": "2026-10-12 05:22:12", "common-name": "194.226.121.150" }, { "name": "ipsec-user-mm-ipsec110-1791598930518", "trusted": "false", "trust-store": "all", "ca": "mm-ipsec110-1791598930518-ca", "invalid-before": "2026-10-10 05:22:13", "invalid-after": "2026-10-12 05:22:13", "common-name": "mm-ipsec110-1791598930518" } ], [ { "name": "mm-ipsec110-1791598930518-import", "trusted": "true", "trust-store": "ipsec", "invalid-before": "2026-10-10 04:22:13", "invalid-after": "2026-10-12 04:22:13", "common-name": "mm-ipsec110-1791598930518" }, { "name": "mm-ipsec110-1791598930518-import", "trusted": "true", "trust-store": "ipsec", "invalid-before": "2026-10-10 04:22:12", "invalid-after": "2026-10-12 04:22:12", "common-name": "mm-ipsec110-1791598930518-CA" } ] ], "error": "Complex DN session not established" } } ], "beforeFix": { "complex": { "date": "2026-10-10", "block": "12.5.110", "name": "mm-ipsec110-1791599034879", "cn": "mm-ipsec110-1791599034879, QA+Team=VPN", "observations": [ { "serverId": 1, "active": [ { ".id": "*1", "id": "C=US, O=Example, Ltd, OU=QA+Operations, CN=mm-ipsec110-1791599034879, QA+Team=VPN", "state": "established", "dynamic-address": "198.18.110.250", "remote-address": "104.165.244.7", "uptime": "1s" } ], "catalog": [ { "name": "mm-ipsec110-1791599034879", "commonName": "mm-ipsec110-1791599034879, QA+Team=VPN", "certName": "ipsec-user-mm-ipsec110-1791599034879", "online": false } ] }, { "serverId": 2, "active": [ { ".id": "*1", "id": "194.226.121.150", "state": "established", "remote-address": "194.226.121.150", "uptime": "1s" } ], "catalog": [] } ], "cleanup": [ { "serverId": 1, "/system/logging": true, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true }, { "serverId": 2, "/system/logging": true, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true } ], "databaseWrites": false, "certificate": { "name": "ipsec-user-mm-ipsec110-1791599034879", "common-name": "mm-ipsec110-1791599034879, QA+Team=VPN", "organization": "Example, Ltd", "unit": "QA+Operations", "country": "US", "ca": "mm-ipsec110-1791599034879-ca", "key-usage": "digital-signature,key-encipherment,tls-client" }, "debug": [ [ { "time": "2026-10-10 05:24:03", "message": "mm-ipsec110-1791599034879: => certificate (size 0x381)" }, { "time": "2026-10-10 05:24:03", "message": "mm-ipsec110-1791599034879: => peer's auth (size 0x100)" }, { "time": "2026-10-10 05:24:03", "message": "mm-ipsec110-1791599034879: => auth nonce (size 0x18)" }, { "time": "2026-10-10 05:24:03", "message": "peer authorized: mm-ipsec110-1791599034879 104.165.244.7-194.226.121.150 8b32523df8e1e6da:cefc293a7eb1e7fa" }, { "time": "2026-10-10 05:24:03", "message": "mm-ipsec110-1791599034879: => auth nonce (size 0x18)" }, { "time": "2026-10-10 05:24:03", "message": "mm-ipsec110-1791599034879: => my auth (size 0x100)" } ], [ { "time": "2026-10-10 04:22:17", "message": "got fatal error: AUTHENTICATION_FAILED" }, { "time": "2026-10-10 04:22:27", "message": "mm-ipsec110-1791598930518: => auth nonce (size 0x18)" }, { "time": "2026-10-10 04:22:27", "message": "mm-ipsec110-1791598930518: => my auth (size 0x0)" }, { "time": "2026-10-10 04:22:27", "message": "got fatal error: AUTHENTICATION_FAILED" }, { "time": "2026-10-10 04:22:37", "message": "mm-ipsec110-1791598930518: => auth nonce (size 0x18)" }, { "time": "2026-10-10 04:22:37", "message": "mm-ipsec110-1791598930518: => my auth (size 0x0)" }, { "time": "2026-10-10 04:22:37", "message": "got fatal error: AUTHENTICATION_FAILED" }, { "time": "2026-10-10 04:24:03", "message": "mm-ipsec110-1791599034879: => auth nonce (size 0x18)" }, { "time": "2026-10-10 04:24:03", "message": "mm-ipsec110-1791599034879: => my auth (size 0x100)" }, { "time": "2026-10-10 04:24:04", "message": "mm-ipsec110-1791599034879: => certificate (size 0x33f)" }, { "time": "2026-10-10 04:24:04", "message": "mm-ipsec110-1791599034879: => peer's auth (size 0x100)" }, { "time": "2026-10-10 04:24:04", "message": "mm-ipsec110-1791599034879: => auth nonce (size 0x18)" }, { "time": "2026-10-10 04:24:04", "message": "peer authorized: mm-ipsec110-1791599034879 104.165.244.7-194.226.121.150 8b32523df8e1e6da:cefc293a7eb1e7fa" } ] ], "certificates": [ [ { "name": "mm-ipsec110-1791599034879-ca", "trusted": "true", "trust-store": "all", "invalid-before": "2026-10-10 05:23:56", "invalid-after": "2026-10-12 05:23:56", "common-name": "mm-ipsec110-1791599034879-CA" }, { "name": "mm-ipsec110-1791599034879-server", "trusted": "false", "trust-store": "all", "ca": "mm-ipsec110-1791599034879-ca", "invalid-before": "2026-10-10 05:23:58", "invalid-after": "2026-10-12 05:23:58", "common-name": "194.226.121.150" }, { "name": "ipsec-user-mm-ipsec110-1791599034879", "trusted": "false", "trust-store": "all", "ca": "mm-ipsec110-1791599034879-ca", "invalid-before": "2026-10-10 05:24:00", "invalid-after": "2026-10-12 05:24:00", "common-name": "mm-ipsec110-1791599034879, QA+Team=VPN" } ], [ { "name": "mm-ipsec110-1791599034879-client-imported", "trusted": "true", "trust-store": "ipsec", "invalid-before": "2026-10-10 04:24:00", "invalid-after": "2026-10-12 04:24:00", "common-name": "mm-ipsec110-1791599034879, QA+Team=VPN" }, { "name": "mm-ipsec110-1791599034879-ca-imported", "trusted": "true", "trust-store": "ipsec", "invalid-before": "2026-10-10 04:23:56", "invalid-after": "2026-10-12 04:23:56", "common-name": "mm-ipsec110-1791599034879-CA" } ] ], "catalogCorrect": false }, "fullSubject": { "date": "2026-10-10", "block": "12.5.110", "name": "mm-ipsec110-1791599279541", "cn": "mm-ipsec110-1791599279541, QA+Team=\"VPN\"\\Lab", "observations": [ { "serverId": 1, "active": [ { ".id": "*1", "id": "C=US, S=New York, L=Albany, O=Example, Ltd, OU=QA+Operations, CN=mm-ipsec110-1791599279541, QA+Team=\"VPN\"\\Lab", "state": "established", "dynamic-address": "198.18.110.250", "remote-address": "104.165.244.7", "uptime": "1s" } ], "catalog": [ { "name": "mm-ipsec110-1791599279541", "commonName": "mm-ipsec110-1791599279541, QA+Team=\"VPN\"\\Lab", "certName": "ipsec-user-mm-ipsec110-1791599279541", "online": false } ] }, { "serverId": 2, "active": [ { ".id": "*1", "id": "194.226.121.150", "state": "established", "remote-address": "194.226.121.150", "uptime": "1s" } ], "catalog": [] } ], "cleanup": [ { "serverId": 1, "/system/logging": true, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true }, { "serverId": 2, "/system/logging": true, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true } ], "databaseWrites": false, "certificate": { "name": "ipsec-user-mm-ipsec110-1791599279541", "common-name": "mm-ipsec110-1791599279541, QA+Team=\"VPN\"\\Lab", "organization": "Example, Ltd", "unit": "QA+Operations", "country": "US", "state": "New York", "locality": "Albany", "ca": "mm-ipsec110-1791599279541-ca", "key-usage": "digital-signature,key-encipherment,tls-client" }, "debug": [ [ { "time": "2026-10-10 05:24:03", "message": "mm-ipsec110-1791599034879: => certificate (size 0x381)" }, { "time": "2026-10-10 05:24:03", "message": "mm-ipsec110-1791599034879: => peer's auth (size 0x100)" }, { "time": "2026-10-10 05:24:03", "message": "mm-ipsec110-1791599034879: => auth nonce (size 0x18)" }, { "time": "2026-10-10 05:24:03", "message": "peer authorized: mm-ipsec110-1791599034879 104.165.244.7-194.226.121.150 8b32523df8e1e6da:cefc293a7eb1e7fa" }, { "time": "2026-10-10 05:24:03", "message": "mm-ipsec110-1791599034879: => auth nonce (size 0x18)" }, { "time": "2026-10-10 05:24:03", "message": "mm-ipsec110-1791599034879: => my auth (size 0x100)" }, { "time": "2026-10-10 05:28:07", "message": "mm-ipsec110-1791599279541: => certificate (size 0x3ac)" }, { "time": "2026-10-10 05:28:07", "message": "mm-ipsec110-1791599279541: => peer's auth (size 0x100)" }, { "time": "2026-10-10 05:28:07", "message": "mm-ipsec110-1791599279541: => auth nonce (size 0x18)" }, { "time": "2026-10-10 05:28:07", "message": "peer authorized: mm-ipsec110-1791599279541 104.165.244.7-194.226.121.150 c955a36f68061a2b:de97c72421f9d773" }, { "time": "2026-10-10 05:28:07", "message": "mm-ipsec110-1791599279541: => auth nonce (size 0x18)" }, { "time": "2026-10-10 05:28:07", "message": "mm-ipsec110-1791599279541: => my auth (size 0x100)" } ], [ { "time": "2026-10-10 04:24:03", "message": "mm-ipsec110-1791599034879: => auth nonce (size 0x18)" }, { "time": "2026-10-10 04:24:03", "message": "mm-ipsec110-1791599034879: => my auth (size 0x100)" }, { "time": "2026-10-10 04:24:04", "message": "mm-ipsec110-1791599034879: => certificate (size 0x33f)" }, { "time": "2026-10-10 04:24:04", "message": "mm-ipsec110-1791599034879: => peer's auth (size 0x100)" }, { "time": "2026-10-10 04:24:04", "message": "mm-ipsec110-1791599034879: => auth nonce (size 0x18)" }, { "time": "2026-10-10 04:24:04", "message": "peer authorized: mm-ipsec110-1791599034879 104.165.244.7-194.226.121.150 8b32523df8e1e6da:cefc293a7eb1e7fa" }, { "time": "2026-10-10 04:28:07", "message": "mm-ipsec110-1791599279541: => auth nonce (size 0x18)" }, { "time": "2026-10-10 04:28:07", "message": "mm-ipsec110-1791599279541: => my auth (size 0x100)" }, { "time": "2026-10-10 04:28:07", "message": "mm-ipsec110-1791599279541: => certificate (size 0x33f)" }, { "time": "2026-10-10 04:28:07", "message": "mm-ipsec110-1791599279541: => peer's auth (size 0x100)" }, { "time": "2026-10-10 04:28:07", "message": "mm-ipsec110-1791599279541: => auth nonce (size 0x18)" }, { "time": "2026-10-10 04:28:07", "message": "peer authorized: mm-ipsec110-1791599279541 104.165.244.7-194.226.121.150 c955a36f68061a2b:de97c72421f9d773" } ] ], "certificates": [ [ { "name": "mm-ipsec110-1791599279541-ca", "trusted": "true", "trust-store": "all", "invalid-before": "2026-10-10 05:28:01", "invalid-after": "2026-10-12 05:28:01", "common-name": "mm-ipsec110-1791599279541-CA" }, { "name": "mm-ipsec110-1791599279541-server", "trusted": "false", "trust-store": "all", "ca": "mm-ipsec110-1791599279541-ca", "invalid-before": "2026-10-10 05:28:02", "invalid-after": "2026-10-12 05:28:02", "common-name": "194.226.121.150" }, { "name": "ipsec-user-mm-ipsec110-1791599279541", "trusted": "false", "trust-store": "all", "ca": "mm-ipsec110-1791599279541-ca", "invalid-before": "2026-10-10 05:28:03", "invalid-after": "2026-10-12 05:28:03", "common-name": "mm-ipsec110-1791599279541, QA+Team=\"VPN\"\\Lab" } ], [ { "name": "mm-ipsec110-1791599279541-client-imported", "trusted": "true", "trust-store": "ipsec", "invalid-before": "2026-10-10 04:28:03", "invalid-after": "2026-10-12 04:28:03", "common-name": "mm-ipsec110-1791599279541, QA+Team=\"VPN\"\\Lab" }, { "name": "mm-ipsec110-1791599279541-ca-imported", "trusted": "true", "trust-store": "ipsec", "invalid-before": "2026-10-10 04:28:01", "invalid-after": "2026-10-12 04:28:01", "common-name": "mm-ipsec110-1791599279541-CA" } ] ], "catalogCorrect": false } }, "accepted": { "date": "2026-10-10", "block": "12.5.110", "name": "mm-ipsec110-1791599881177", "cn": "mm-ipsec110-1791599881177, QA+Team=\"VPN\"\\Lab", "observations": [ { "serverId": 1, "active": [ { ".id": "*1", "id": "C=US, S=New York, L=Albany, O=Example, Ltd, OU=QA+Operations, CN=mm-ipsec110-1791599881177, QA+Team=\"VPN\"\\Lab", "state": "established", "dynamic-address": "198.18.110.250", "remote-address": "104.165.244.7", "uptime": "1s" } ], "catalog": [ { "name": "mm-ipsec110-1791599881177", "commonName": "mm-ipsec110-1791599881177, QA+Team=\"VPN\"\\Lab", "certName": "ipsec-user-mm-ipsec110-1791599881177", "online": true, "activeAddress": "198.18.110.250" } ] }, { "serverId": 2, "active": [ { ".id": "*1", "id": "194.226.121.150", "state": "established", "remote-address": "194.226.121.150", "uptime": "1s" } ], "catalog": [] } ], "cleanup": [ { "serverId": 1, "/system/logging": true, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true }, { "serverId": 2, "/system/logging": true, "/ip/ipsec/identity": true, "/ip/ipsec/peer": true, "/ip/ipsec/policy": true, "/ip/ipsec/policy/group": true, "/ip/ipsec/mode-config": true, "/ip/ipsec/proposal": true, "/ip/ipsec/profile": true, "/certificate": true, "/file": true, "/ip/address": true, "/ip/route": true, "/ip/firewall/nat": true } ], "databaseWrites": false, "certificate": { "name": "ipsec-user-mm-ipsec110-1791599881177", "common-name": "mm-ipsec110-1791599881177, QA+Team=\"VPN\"\\Lab", "organization": "Example, Ltd", "unit": "QA+Operations", "country": "US", "state": "New York", "locality": "Albany", "ca": "mm-ipsec110-1791599881177-ca", "key-usage": "digital-signature,key-encipherment,tls-client" }, "certificates": [ [ { "name": "mm-ipsec110-1791599881177-ca", "trusted": "true", "trust-store": "all", "invalid-before": "2026-10-10 05:38:02", "invalid-after": "2026-10-12 05:38:02", "common-name": "mm-ipsec110-1791599881177-CA" }, { "name": "mm-ipsec110-1791599881177-server", "trusted": "false", "trust-store": "all", "ca": "mm-ipsec110-1791599881177-ca", "invalid-before": "2026-10-10 05:38:03", "invalid-after": "2026-10-12 05:38:03", "common-name": "194.226.121.150" }, { "name": "ipsec-user-mm-ipsec110-1791599881177", "trusted": "false", "trust-store": "all", "ca": "mm-ipsec110-1791599881177-ca", "invalid-before": "2026-10-10 05:38:04", "invalid-after": "2026-10-12 05:38:04", "common-name": "mm-ipsec110-1791599881177, QA+Team=\"VPN\"\\Lab" } ], [ { "name": "mm-ipsec110-1791599881177-client-imported", "trusted": "true", "trust-store": "ipsec", "invalid-before": "2026-10-10 04:38:04", "invalid-after": "2026-10-12 04:38:04", "common-name": "mm-ipsec110-1791599881177, QA+Team=\"VPN\"\\Lab" }, { "name": "mm-ipsec110-1791599881177-ca-imported", "trusted": "true", "trust-store": "ipsec", "invalid-before": "2026-10-10 04:38:02", "invalid-after": "2026-10-12 04:38:02", "common-name": "mm-ipsec110-1791599881177-CA" } ] ], "catalogCorrect": true }, "preliminaryBrowser": { "incorrectStorageKey": { "report": { "date": "2026-10-10", "runtime": { "backend": "ux-dn110", "frontend": "ux-a11y101" }, "httpMocks": false, "cases": [ { "theme": "dark", "width": 1280, "onlineAddressConfirmed": true, "reloadConfirmed": true, "noPageOverflow": true }, { "theme": "dark", "width": 320, "onlineAddressConfirmed": true, "reloadConfirmed": true, "noPageOverflow": true }, { "theme": "light", "width": 1280, "onlineAddressConfirmed": true, "reloadConfirmed": true, "noPageOverflow": true }, { "theme": "light", "width": 320, "onlineAddressConfirmed": true, "reloadConfirmed": true, "noPageOverflow": true } ], "pageErrors": [], "applicationWrites": [], "scope": "Real established certificate DN client status/address, reload, desktop/mobile, two themes" }, "acceptedThemes": false, "reason": "Helper used theme instead of rl-theme; these cases do not prove light theme" }, "detachedLocator": { "date": "2026-10-10", "error": "locator.scrollIntoViewIfNeeded: Element is not attached to the DOM", "nativeAcceptance": true, "cleanupPassed": true, "resolution": "Reacquire the read-only locator on refresh, bounded 10s; no mutation retry" } }, "browserEvidence": "browser-ipsec-dn-2026-10-10.json", "deployment": { "imageId": "sha256:f0cd7afc7391ac463c8b3c7d183b0c294f01ffca6beda3d240d26bec59c06d72", "tag": "ux-dn110", "revisionLabel": "dn110", "health": { "status": "ok", "timestamp": "2026-10-10T02:34:19.932Z", "version": "1.0.0-test.dn110", "eventLoopDelayMs": 20, "flowWorker": { "alive": false, "bound": false, "pendingSize": 0, "dropped": 0, "packetsReceived": 0 } } }, "limits": [ "RouterOS7.24.5 subject presentation confirmed; not a general ASN.1/RFC4514 parser", "Native certificate matching/assigned address/UI status accepted; data-plane encryption was accepted in77–82, not re-tested here", "Custom OIDs, alternate IKE ID namespaces, client OS, full PKI/restore/IPv6 remain open" ] }