Wireguard - not able to create an Instance without Public Key like in official Doc

[skl283]

Important notices

Before you add a new report, we ask you kindly to acknowledge the following:

• I have read the contributing guide lines at https://github.com/opnsense/core/blob/master/CONTRIBUTING.md
• I am convinced that my issue is new after having checked both open and closed issues at https://github.com/opnsense/core/issues?q=is%3Aissue

Describe the bug

The WireGuard new Instance interface requires that the public key be unique and is filled. This check was probably implemented with #7110. This behavior makes sense to prevent duplicate public keys on the same WireGuard instance, but breaks(?) functionality when using some privacy VPN endpoints where none public keys is needed.

The instance - for dialing in - only have a PrivateKey. In the official Documentation its written for AZIRE VPN correct:

https://docs.opnsense.org/manual/how-tos/wireguard-client-azire.html#step-2-setup-wireguard-instance

--> "In the field Private Key insert the value from your text file and leave Public Key empty."

To Reproduce

Steps to reproduce the behavior:

1. Configure a Wireguard instance. Usind a Text file from a known Provider like azire oder airvpn
2. fill in the Field - without public key

Environment

Software version used and hardware type if relevant, e.g.:

OPNsense 24.1.1 (amd64).

[skl283]

Perhaps this is in addition to #7213 which was also introduced by the check from #7110

[AdSchellevis]

I think I have been a bit to enthusiastic in #7110, if there should be a constraint on the instance, it should be on private key not public... but dropping it doesn't hurt either. I'll drop the instance constraint and we'll wait if anything else is needed.

The original ticket was about duplicate peers...

[skl283]

thanks for your answer, but my problem still exists and i cant edit my WG Instance in 24.1.2 - i think this issue is a show stopper for using a WG Provider for dial in. I can't add/edit an Instance without pub key!

In the doc you describe how to add an azire vpn client setup --> only priv. Key - no Pub Key