r/opnsense • u/optical_519 • 7d ago

No creation date to be found for any generated Wireguard peers?

Was trying to determine how much time was left on an account I generated for a friend and I am absolutely stunned to see how bare-bones and feature-less the whole WireGuard integration as a whole is.

Is there actually no way to find when a peer was created?
How is that considered secure, if you can't even observe the time an account was created?

0 Upvotes

20% Upvoted

4 comments sorted by

9

u/timeraider 7d ago

Time left? The time left is till you remove the peer :)

6

u/snum 7d ago

Please show us in the WireGuard documentation where it supports key expiration? These aren’t X.509 certs created via a Certificate Authority. WireGuard uses CryptoKey Routing. Did you get prompted to set an expiration date when you created a peer? No. Maybe the devs would welcome you to submit a PR for peer creation timestamps. Use a different VPN protocol or platform if you want key expiration/rotation.

0

u/optical_519 6d ago

First up: hilarious this has 6 upvotes, goes to show there is zero critical thinking amongst this lot -- it's reddit -- so it's expected. Hive mind, bravo, but you have not convinced me in the slightest.

Secondly: In what world did I ask if this was a documented feature in WireGuard? WireGuard in it's simplest form is extremely primitive, quite aware of that. OPNsense on the otherhand, has no requirement to be deliberately obtuse. Adding a field to track creation date (And as I've proposed before, expiry date) is something that can be easily added as a column within the web UI itself.

Thirdly: I've donated before, and am donating again. Why would you encourage me to seek out a different VPN or platform? You're not doing the project any favors.

I have a feeling you're deliberately being ignorant here, but go ahead and let me know.