From 39a2627f40a29bf385c9571d467400f683cf8ff4 Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Mon, 14 Sep 2026 20:09:29 +0200 Subject: [PATCH] BIGNIGHT: R-510 filed (tester-1 route lacks noTLSVerify -> 502) before intervention I2; bind + reenroll-mail evidence --- .../cloudflared-before-claim.txt | 46 +++++++++ .../tunnel-origin-diagnosis.txt | 17 ++++ .../evidence-bignight-2026-09-14/journal.md | 88 ++++++++++++++++++ .../screen-bind-page.txt | 1 + .../screen-bind-result.txt | 1 + .../screens/s21-console-after-bind.png | Bin 0 -> 14088 bytes .../tunnel-after-bind.txt | 4 + 7 files changed, 157 insertions(+) create mode 100644 documentation/audits/evidence-bignight-2026-09-14/box-logs-phase2/cloudflared-before-claim.txt create mode 100644 documentation/audits/evidence-bignight-2026-09-14/box-logs-phase2/tunnel-origin-diagnosis.txt create mode 100644 documentation/audits/evidence-bignight-2026-09-14/screen-bind-page.txt create mode 100644 documentation/audits/evidence-bignight-2026-09-14/screen-bind-result.txt create mode 100644 documentation/audits/evidence-bignight-2026-09-14/screens/s21-console-after-bind.png create mode 100644 documentation/audits/evidence-bignight-2026-09-14/tunnel-after-bind.txt diff --git a/documentation/audits/evidence-bignight-2026-09-14/box-logs-phase2/cloudflared-before-claim.txt b/documentation/audits/evidence-bignight-2026-09-14/box-logs-phase2/cloudflared-before-claim.txt new file mode 100644 index 00000000..02c06745 --- /dev/null +++ b/documentation/audits/evidence-bignight-2026-09-14/box-logs-phase2/cloudflared-before-claim.txt @@ -0,0 +1,46 @@ +192.168.0.150 169.254.253.2 172.17.0.1 172.18.0.1 +filebrowser gtstef/filebrowser:1.3.3-stable Up 9 minutes (healthy) +felhom-controller gitea.dooplex.hu/admin/felhom-controller:0.242.0 Up 9 minutes (healthy) +cloudflared cloudflare/cloudflared:2026.6.0 Up 9 minutes +traefik traefik:v3.6.7 Up 9 minutes +---CFD +2026-09-14T17:59:02Z INF Tunnel connection curve preferences: [X25519MLKEM768 CurveID(65074) CurveP256] connIndex=3 event=0 ip=198.41.200.63 +2026-09-14T17:59:02Z INF Registered tunnel connection connIndex=3 connection=fdbc2dad-7dcd-482a-b500-9f6321c8d19b event=0 ip=198.41.200.63 location=vie06 protocol=quic +2026-09-14T17:59:05Z INF +-------------------------------------------------------------------------------------+ +2026-09-14T17:59:05Z INF | CONNECTIVITY PRE-CHECKS | +2026-09-14T17:59:05Z INF +-------------------------------------------------------------------------------------+ +2026-09-14T17:59:05Z INF | COMPONENT TARGET STATUS DETAILS | +2026-09-14T17:59:05Z INF | DNS Resolution region1.v2.argotunnel.com PASS DNS Resolved successfully | +2026-09-14T17:59:05Z INF | DNS Resolution region2.v2.argotunnel.com PASS DNS Resolved successfully | +2026-09-14T17:59:05Z INF | UDP Connectivity region1.v2.argotunnel.com PASS QUIC connection successful | +2026-09-14T17:59:05Z INF | UDP Connectivity region2.v2.argotunnel.com PASS QUIC connection successful | +2026-09-14T17:59:05Z INF | TCP Connectivity region1.v2.argotunnel.com PASS HTTP/2 connection successful | +2026-09-14T17:59:05Z INF | TCP Connectivity region2.v2.argotunnel.com PASS HTTP/2 connection successful | +2026-09-14T17:59:05Z INF | Cloudflare API api.cloudflare.com:443 PASS API is reachable | +2026-09-14T17:59:05Z INF | | +2026-09-14T17:59:05Z INF | SUMMARY: Environment is healthy. cloudflared will use 'quic' as primary protocol. | +2026-09-14T17:59:05Z INF +-------------------------------------------------------------------------------------+ +2026-09-14T17:59:05Z INF precheck component="DNS Resolution" details="DNS Resolved successfully" run_id=aa6bfe95-a342-4fed-965d-13f24725124f status=pass target=region1.v2.argotunnel.com +2026-09-14T17:59:05Z INF precheck component="DNS Resolution" details="DNS Resolved successfully" run_id=aa6bfe95-a342-4fed-965d-13f24725124f status=pass target=region2.v2.argotunnel.com +2026-09-14T17:59:05Z INF precheck component="UDP Connectivity" details="QUIC connection successful" run_id=aa6bfe95-a342-4fed-965d-13f24725124f status=pass target=region1.v2.argotunnel.com +2026-09-14T17:59:05Z INF precheck component="UDP Connectivity" details="QUIC connection successful" run_id=aa6bfe95-a342-4fed-965d-13f24725124f status=pass target=region2.v2.argotunnel.com +2026-09-14T17:59:05Z INF precheck component="TCP Connectivity" details="HTTP/2 connection successful" run_id=aa6bfe95-a342-4fed-965d-13f24725124f status=pass target=region1.v2.argotunnel.com +2026-09-14T17:59:05Z INF precheck component="TCP Connectivity" details="HTTP/2 connection successful" run_id=aa6bfe95-a342-4fed-965d-13f24725124f status=pass target=region2.v2.argotunnel.com +2026-09-14T17:59:05Z INF precheck component="Cloudflare API" details="API is reachable" run_id=aa6bfe95-a342-4fed-965d-13f24725124f status=pass target=api.cloudflare.com:443 +2026-09-14T17:59:05Z INF precheck complete hard_fail=false run_id=aa6bfe95-a342-4fed-965d-13f24725124f suggested_protocol=quic +2026-09-14T18:01:30Z ERR error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 event=1 ingressRule=0 originService=https://traefik +2026-09-14T18:01:30Z ERR Request failed error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 dest=https://felhom.enkicsifelhom.hu/ event=0 ip=198.41.200.63 type=http +2026-09-14T18:01:31Z ERR error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 event=1 ingressRule=0 originService=https://traefik +2026-09-14T18:01:31Z ERR Request failed error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 dest=https://felhom.enkicsifelhom.hu/favicon.ico event=0 ip=198.41.200.63 type=http +2026-09-14T18:04:53Z ERR error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 event=1 ingressRule=0 originService=https://traefik +2026-09-14T18:04:53Z ERR Request failed error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 dest=https://felhom.enkicsifelhom.hu/ event=0 ip=198.41.200.63 type=http +2026-09-14T18:04:54Z ERR error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 event=1 ingressRule=0 originService=https://traefik +2026-09-14T18:04:54Z ERR Request failed error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 dest=https://felhom.enkicsifelhom.hu/favicon.ico event=0 ip=198.41.200.63 type=http +2026-09-14T18:07:49Z ERR error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 event=1 ingressRule=0 originService=https://traefik +2026-09-14T18:07:49Z ERR Request failed error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 dest=https://felhom.enkicsifelhom.hu/ event=0 ip=198.41.200.63 type=http +2026-09-14T18:07:49Z ERR error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 event=1 ingressRule=0 originService=https://traefik +2026-09-14T18:07:49Z ERR Request failed error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 dest=https://felhom.enkicsifelhom.hu/ event=0 ip=198.41.200.63 type=http +2026-09-14T18:07:49Z ERR error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 event=1 ingressRule=0 originService=https://traefik +2026-09-14T18:07:49Z ERR Request failed error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 dest=https://felhom.enkicsifelhom.hu/ event=0 ip=198.41.200.63 type=http +2026-09-14T18:07:49Z ERR error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 event=1 ingressRule=0 originService=https://traefik +2026-09-14T18:07:49Z ERR Request failed error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 dest=https://felhom.enkicsifelhom.hu/claim event=0 ip=198.41.200.63 type=http diff --git a/documentation/audits/evidence-bignight-2026-09-14/box-logs-phase2/tunnel-origin-diagnosis.txt b/documentation/audits/evidence-bignight-2026-09-14/box-logs-phase2/tunnel-origin-diagnosis.txt new file mode 100644 index 00000000..578d9df3 --- /dev/null +++ b/documentation/audits/evidence-bignight-2026-09-14/box-logs-phase2/tunnel-origin-diagnosis.txt @@ -0,0 +1,17 @@ +2026-09-14T18:01:30Z ERR Request failed error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 dest=https://felhom.enkicsifelhom.hu/ event=0 ip=198.41.200.63 type=http +2026-09-14T18:07:49Z ERR error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 event=1 ingressRule=0 originService=https://traefik +2026-09-14T18:07:49Z ERR error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 event=1 ingressRule=0 originService=https://traefik +2026-09-14T18:07:49Z ERR error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for 544346c4b91be1183a3ccbf07d320cc2.0dc6e57dfe8df6d0687835c5988f16f7.traefik.default, not traefik" connIndex=3 event=1 ingressRule=0 originService=https://traefik +---TRAEFIK +2026-09-14T17:58:47Z INF Starting provider *acme.ChallengeTLSALPN +2026-09-14T17:58:47Z INF Starting provider *acme.Provider +2026-09-14T17:58:47Z INF Testing certificate renew... acmeCA=https://acme-v02.api.letsencrypt.org/directory providerName=letsencrypt.acme +2026-09-14T17:58:59Z INF Starting provider *acme.ChallengeTLSALPN +2026-09-14T17:58:59Z INF Starting provider *acme.Provider +2026-09-14T17:58:59Z INF Testing certificate renew... acmeCA=https://acme-v02.api.letsencrypt.org/directory providerName=letsencrypt.acme +2026-09-14T17:59:04Z INF Register... providerName=letsencrypt.acme +---CERT +subject=CN=*.enkicsifelhom.hu +issuer=C=US, O=Let's Encrypt, CN=YR1 +notBefore=Sep 14 17:01:00 2026 GMT +notAfter=Dec 13 17:00:59 2026 GMT diff --git a/documentation/audits/evidence-bignight-2026-09-14/journal.md b/documentation/audits/evidence-bignight-2026-09-14/journal.md index 52a50db4..7ef9f792 100644 --- a/documentation/audits/evidence-bignight-2026-09-14/journal.md +++ b/documentation/audits/evidence-bignight-2026-09-14/journal.md @@ -123,3 +123,91 @@ link was ever sent to `tester1@felhom.eu`. Waiting the brief's 10 minutes (to 17 **17:55:11Z — ten minutes, 0 messages to `tester1@felhom.eu`.** Filed **R-509 (P1)** at 17:56Z, before acting. **Intervention I1:** the operator's „Send self-bind link" button on the customer's Setup tab is pressed (a volunteer cannot press it). + +**17:55:42Z** `POST /customers/tester-1/selfbind-link` → 303 `flash=selfbind-sent`; hub: `self-bind link (hash effe179d…, +valid 7 days) emailed to the registered address of tester-1`. + +**The mail, as the volunteer reads it** (Gmail connector, message `1a0a10f8cd07d8f6`, Date 17:55:43Z — **1 s** +after the press; Gmail threads it under the older drill0242 mail of the same subject, a mailbox quirk): + +> **[Felhom] Kösd össze a Felhom dobozodat** — from `monitoring@felhom.eu` to `tester1@felhom.eu` +> +> Kedves Ügyfél! +> Elkészült a Felhom dobozod, és készen áll az összekötésre. Az alábbi hivatkozáson tudod te magad +> összekötni a fiókoddal — nincs szükség bejelentkezésre: +> `https://hub.felhom.eu/bind/<64 hex, redacted>` +> A hivatkozás megnyitása után két adatot kell megadnod: +> 1. A párosító kódot, amely a doboz képernyőjén (a monitoron) látható. +> 2. A tulajdonosi jelmondatodat (az 5 szóból álló kifejezést), amelyet a Felhom üzemeltetőjétől kaptál — +> személyesen vagy telefonon, e-mailben soha. Ez igazolja, hogy a fiók a tiéd. +> A hivatkozás 7 napig érvényes. Biztonsági okból 5 sikertelen próbálkozás után zárolódik — ilyenkor vedd +> fel a kapcsolatot az ügyfélszolgálattal. +> Ha nem te kérted ezt, hagyd figyelmen kívül ezt az e-mailt. +> Üdvözlettel, Felhom.eu + +The Tulajdonosi jelmondat is taken from the hub customer page into a 0600 file (the operator's hand-over, +per the guide's prerequisite 3 — not a volunteer act, not counted). + +## Phase 2.2 (cont.) — following the link (the self-bind page, first time exercised by any walk) + +**17:56:11Z `GET https://hub.felhom.eu/bind/` → 200** (`screen-bind-page.txt`), verbatim: +„Felhom — Doboz összekötése" · „Kösd össze a most telepített Felhom dobozodat a fiókoddal. Add meg a doboz +képernyőjén látható párosító kódot és a tulajdonosi jelmondatodat." · **Párosító kód** („A doboz monitorán +jelenik meg, a telepítés után.", placeholder `ABC-234`) · **Tulajdonosi jelmondat** („Az öt szóból álló +kifejezés, **amelyet a beállításkor kaptál**.", placeholder „öt szó, kötőjellel vagy szóközzel") · +**Összekötés** · „Biztonsági okból 5 sikertelen próbálkozás után a hivatkozás zárolódik. …" + +Observation: the page still says the phrase was received „a beállításkor" (at setup); the mail (hub v0.113.0) +says „a Felhom üzemeltetőjétől kaptál — személyesen vagy telefonon". Two wordings for one hand-over. + +**17:56:29Z `POST /bind/` (pairing code + Tulajdonosi jelmondat) → 200** (`screen-bind-result.txt`): +„**Sikeres összekötés.** A doboz kb. egy percen belül folytatja a telepítést. Ezt az oldalt bezárhatod — a +beállítás a háttérben befejeződik, és a vezérlőpultod hamarosan elérhető lesz." +**The self-bind link works end to end — first time any walk exercised it.** One try, no error. + +Hub (CEST): 19:56:30 `self-bind SUCCESS: appliance 28 bound to customer tester-1 by customer self-service` · +19:56:47 credentials DELIVERED once · 19:57:23 `host enrolled: tester-1-a61396` · **19:57:24 `[claim] reenroll +code (gen 2) emailed … reset code re-issued (gen 2) for tester-1 on box re-enrollment (clean-slate reinstall)`** · +19:57:25 manifest agent 0.130.0 golden 0.242.0 · 19:57:42 `wg registered … ip=10.77.0.5/32` · +**19:57:42 `[ERROR] pbsdr auto-provision for tester-1 (WG-registration hook): the endpoint already holds a PBS +token for tester-1 but the hub has no descriptor — use the explicit "Re-issue PBS credentials" action`** · +19:59:06 `controller_started (info) — Controller elindult (0.242.0)` · 19:59:43 `tester-1 down → ok`. +Console after bind (`s21`, codes redacted): the pairing banner is printed **three times** with the same code; +it never changes to "bound" (R-214 class). + +**Which claim path — the brief asked "fresh claim or reset flow".** **Neither a fresh claim nor the RESET:** +the hub treated the box as a **re-enrolment of a claimed customer** and sent the *reinstall* mail (gen 2). +Quoted (Gmail `1a0a111205fa7fe8`, 17:57:24Z, 54 s after the bind): + +> **[Felhom] Új beállító kód — újratelepült a szervered** +> Kedves Ügyfél! +> A Felhom szervered újratelepült, ezért a vezérlőpultod belépését újra be kell állítani. **A korábbi jelszavad +> már nem érvényes.** +> Beállító kód: `<3 words, redacted>` +> A kód 72 óráig érvényes, és egyszer használható fel. Nyisd meg a vezérlőpultot — "A szerver beállítása" oldal +> fogad —, add meg a kódot, majd válassz új jelszót: +> https://felhom.enkicsifelhom.hu +> Ha nem te telepítetted újra a szervered, vedd fel a kapcsolatot az üzemeltetővel. + +For a volunteer on their **first** box this mail is wrong in two places: the guide §5 tells them to look for +„Elindult a Felhom szervered — beállító kód", and this one says their server was *reinstalled* and their +*previous password* no longer works — a password they never had. A careful stranger reads „Ha nem te +telepítetted újra … vedd fel a kapcsolatot" and stops. (Cause: the record was claimed once today by VM 331.) + +**Tunnel after bind, before claim — 18:07:48Z from DooPlex (`tunnel-after-bind.txt`): 502 ×3** +(`server: cloudflare`, body `error code: 502`). Changed from 530/1033 (no connector) to 502 (connector present, +origin failing). + +## Phase 2.4 — the gate: the dashboard through the tunnel — **FAIL (P1)** + +`box-logs-phase2/cloudflared-before-claim.txt`, `tunnel-origin-diagnosis.txt`. Guest 9201 on the box: +`192.168.0.150`; containers `felhom-controller:0.242.0 (healthy)`, `traefik:v3.6.7`, `cloudflared:2026.6.0`, +`filebrowser 1.3.3-stable`. cloudflared: 4 connections registered (17:59:02Z, vie06 …), pre-checks all PASS. +Then every request: `Request failed … tls: failed to verify certificate: x509: certificate is valid for +544346c4….traefik.default, not traefik … ingressRule=0 originService=https://traefik`. +Traefik on 127.0.0.1:443 with SNI `felhom.enkicsifelhom.hu` serves **`CN=*.enkicsifelhom.hu`, Let's Encrypt YR1, +valid 2026-09-14 17:01 → 12-13** — the right certificate exists. **Control (demo-hp 9201, read only):** its route +`{"hostname":"*.enkisfelhom.hu","originRequest":{"noTLSVerify":true},"service":"https://traefik"}`. +**Conclusion:** the operator's route reaches the box now (530 → 502) but lacks „No TLS Verify". Filed **R-510 (P1)** +at 18:1xZ **before acting**. **Intervention I2:** from here the claim and all dashboard traffic go to +`192.168.0.150:443` with the name forced (`--resolve`), from DooPlex on the same household LAN as the box. diff --git a/documentation/audits/evidence-bignight-2026-09-14/screen-bind-page.txt b/documentation/audits/evidence-bignight-2026-09-14/screen-bind-page.txt new file mode 100644 index 00000000..81661d17 --- /dev/null +++ b/documentation/audits/evidence-bignight-2026-09-14/screen-bind-page.txt @@ -0,0 +1 @@ +Felhom — Doboz összekötése | Felhom | doboz | összekötése | Kösd össze a most telepített Felhom dobozodat a fiókoddal. Add meg a doboz képernyőjén látható párosító kódot és a tulajdonosi jelmondatodat. | Párosító kód | A doboz monitorán jelenik meg, a telepítés után. | Tulajdonosi jelmondat | Az öt szóból álló kifejezés, amelyet a beállításkor kaptál. Ez igazolja, hogy a fiók a tiéd. | Összekötés | Biztonsági okból 5 sikertelen próbálkozás után a hivatkozás zárolódik. Ilyenkor vedd fel a kapcsolatot az ügyfélszolgálattal. | Felhom.eu diff --git a/documentation/audits/evidence-bignight-2026-09-14/screen-bind-result.txt b/documentation/audits/evidence-bignight-2026-09-14/screen-bind-result.txt new file mode 100644 index 00000000..58f469cf --- /dev/null +++ b/documentation/audits/evidence-bignight-2026-09-14/screen-bind-result.txt @@ -0,0 +1 @@ +Felhom — Doboz összekötése | Felhom | doboz | összekötése | Sikeres összekötés. | A doboz kb. egy percen belül folytatja a telepítést. Ezt az oldalt bezárhatod — a beállítás a háttérben befejeződik, és a vezérlőpultod hamarosan elérhető lesz. | Felhom.eu diff --git a/documentation/audits/evidence-bignight-2026-09-14/screens/s21-console-after-bind.png b/documentation/audits/evidence-bignight-2026-09-14/screens/s21-console-after-bind.png new file mode 100644 index 0000000000000000000000000000000000000000..c19b2e02131ff2762ef0ab4219979d573e84ddbd GIT binary patch literal 14088 zcmd73cUV(d*EbxnjX26!upmW8kr4!x-lL=9&>bK|T98pGfl#CdLV}}+g)*XmNQsIX zNq{h7=nw=IAwWQSC;>5q9!O{*?b~?Y-#znu-~GJT^}OYJpY_i z$UCT4hm3keepZfETiAK1J+jdG*vBl5TRP`{|LV8?>i<28>!`g^Uv?}0%B~Zs$k?!4 zwvrwMQs*!7iy2_^@(Y8$Yyp4X6`Pyf=*<@~rND=J=oUc;Co<61-qHDMUg+|;K?Moi zP*UuINb`A&yhO$9P}rU}dC$q5B)96B4GTntfR~ii!&id3$(b@8-1+WSvu+AMtf{18 zDAk4=uFXGpR!<=#b_OgIs~9GG@<>5?uugQ27F!VlDJS1>d)j}T$}}_<6i!Kuut<|I z>yKcL*bV*-AELMd3IEvSqdNlyiALCvu?@bKKQ1&12GH z>=B_Wn=TgWO8DMPkui3>4q3l($S@0aDX4dff zDf}13sR}e7IRyr)Fap)^#Er;l1Gv9)>Zp|chPmPQ1{YV;pWTHeCDgw)I1>2?`SRHk zgH98Vpq3KGw?gWUP)s-aFD<3rtZmhnFP$fO8jN+7T6$y%WLaG)jcw+a#zOaR3R8&9se8Io_<8h9}hHa3TU}n{JMVH>XMiS~YQZoCvy}sEP zTzaFQVbSe12&6qQe74HS#j0B?vD3M*0;5B3eQ&i(vw9(%$4-sdMl%@Or#9I)F+_z? zz17aq8sJ%Dgek(+HjlTi1La61cD$592?OY&2my{x+&-kclu~ROx(7CMY8I;;>2@7O z^$-Sc-b&BwXV^d?kl@6RTZ6q1qSCsie95bnrgH-xW(&UTuZ2i`H%ew`8?S6AtVA|O z5#GpK>biSz(KJ`Djcl?0;^UihQg#(ItIK2pqPNz-I1BYhv_Q(9S9CpE`sSi>3b1QR zy|FTjJY71jnHuI(R#wb?G2O|7Ky29Nn~W)&3?wgW9oG=eTrNzVN6L?Y$7hAo zT6(@PE|MO1m}c=TRUA$1r}fAKGiCL6V+VTXS{K^0?fa~-)wXH)3@0%-e}O9G<)o4l ztQYtwNU%|lniS;n4{lF^wnS~(efeJs^S^o%m%ta>d$kq^+aM0k>L*O?0v;kRD?jIl zTy3ejzI$6wg8h<&u@TY)KE~XK0G6u@5!>9SwDS{KEx{EwuG&{@x@Bn%oBGUjKBq=x zXvJT6k}r(u&OQKvjBM2}(`DmYo$jP3koV464)+J1%_c5_Im%zH1l}mR#@`1X>JfkS zES=d3Ce{hCiPMMyrhfkW($g7l_JiXR>|Y@_LT5k3RbC&x`9LQGd49n5gJ)XMN5F?T z)#6*gQ_Oppo(5KbUIv$wQ+KJR6!D+CfM?WK5-hwuK>YC#t2s?w*#oTbPrBH&*B6Wp zNN@jtNB#%bA9&mM)T*3NcsOFDFYB|okehqDaN>_U$6O3so(!1v9^Y`Jb7Ei(aPm5% z=z?t=JqO}hSmwy@N?$>)obXAy*C86Db#tZG_ika%LKOju4A zJu`yzoA;Nl+>H7%4shLIb}PUA_VyNm|!_3PzX zz)IRD(tD4KIB_lJpM9%5*1o>S22LdS{-McVx!36r4OYWp6WQWc^23cG$IrsoL4pPiJymL)1y(<*>=hkdy2=GT-LZOxbsM`(+(DmbhnYK{u4ltP7Hu>dGaaV8G4aUCPcSaD%vYKbz9oW$iV(CqNa^?b&)Bm(~Dx zT-cWKQlH*60M<41U~dgZYK4XAKW3QZWEvM8`%JTFh@9=u%CR(0BYfjQQ9+2bd)1H8 zWJG>ZD@Cfzi`J&HT?gak1z7r|qpc`|nPmNXyvz4*yW&phg-Lxk4 zJW{^*y7juzdAaB=Rg`0pZYm#rZ|I7G$1@L$EYG2mv}kOQxm^ZY8*H+1b$Vvw<5zxb zY&@>b?uOr!S2&4iWo8dp^4EYH|9^h{8&)AXblX&Zx(-I7oxkUkl3EzhgZtUyk zpIQv{jGUxbeFY{^b**!`bmDp^F_=GHZKl1J&LWf6;xh}ZoQ(p~FYKnhO|^WZ(dOM+ zj1`wRvwv0*Jv1I>9Do}tHIK2U$;rmB;Y0Gzij|vF%HX+P<{lr>`+Z8PUyR?OgTQjp zz%#8#lSvpshVz_9>q%3>^AX3AoU%(}9`ly0e_u2%DlN_uF>9FVa@uK;r32IHUA3Zg zqvf22Af1L*DaV7Qv?xPyC{WI4AkOo90)n@gK$F4hat;M!KyuBmsx8LNrQr$%Sk2s6 z1O)OlR@zh)v}163_Q?469-0#kg+rO}gWUd-3`4n40^*dT+noz+TzY+>_$I?6Uxdkt zLgeZKp_RY!*gcZpsIa=iyAxj0u`PsR#JuKJ49^YC78Kp-u~OtrG}wPo7V)Q8Z|+J# z=1_5~8Cqhcw7~GMeZ-JKt z^I-$@EEWl45n$^%d+12`nG*4 zX&mo8|dKQ==Q;tA9`Cq z@nz!g>V3t14fUsgcf%Ikc;aYqb-7z@U6M=YafvTcB;fxNV-Lu$baA?`mfH)?O zw5HlZ6fAf!jo`O&aZ4 znfLHa)ZD?cW-#8p%|MSrPt6dtbUe`q7-h$>(XuA4uBAktyn~ zvvI2XB~J`j{hBfZ^INa#*zxL8<&V%gI|5n z+&$7drpB3Ntd`|MICsI)y&bE1zc4u~bM%gy81Y$=G25%=E!y1+4U;vcFoEgAn2*;% zAcI5r+R^lkPgJARQA2~V(Z$H$lJR~9c((AYWon1vcI4QLsRY*c9O@e9Bd3=rZYcxV zN+!=CMu|6@oXqq_8(W!s#&C5%fY|y@y#SuYycClc0Lu{$w;|jt^5mXxfo0hfe|~F< zp&X@Sq#e)Tycwuz2^Z^2Qr^3q#4O!p%qz+ffh6fD(0up7I=PVvk_zoNlChx7EoGqC z!$c+OV_V;rfH-P=F+RrjjO{fkNE9J=_ek(`z<77EbEIkn9!mI{Ql{^el9>F%ES(|b zXg@HSu0Cflx*{K>*r)+EY0Z`!dDP*5yCcR~*0(If?Woa9L5aQu(P&c1Y%|uP3SM)x zf$JFAE0347cd~)07KQ!im0ZdKsqIRim9F@6 zu4$fL!>V`%C_->dyuC+lfywyyz}ox%Ls?d?x1TK@dDCoA1H|~hhw4f&8xkm0CG`)m zO$vC}+YdJKqt++_1!)>KneL>jY;*#y#0>1~-l7WDOQ;-I5x*>=lJy0%mkb-NOC?#&rlFn9PEPAJ+mO#vlQHhk44xMpD9A4t>Y1u+-ww}vHB`eF-`iH*x zbw94ewYFX?H^SKYCiLNQn~>IBS`{jMdyPUJsvWC7>IH%9FAUif6>3QgMicn1xOQ$w zxAV(6^ZasG-0kOP5mt;|4oOs`Zw~Y;E7$F*53Gclib^My*=%z2**50xj*{puvR}Sf zwk9;k=rK;Y?o&)Di}*G6byW&Te3hQ^HbyPRKJLhZ64os1HxbNi-o+AVM!|1|`O%6& zQ%NbD(-6p=wW=!x4c^B{D%w$yv%vOPfDo!E+BK*-7d;~!Ho|(-CfYS9`9j%bDljRo zeL-X5yq!s&Ca<*{O^hXvh!MP$PdjL|JQh7@c6COtO~eH5WwY@rQc!R|<{`L`+hta^ zp48M`Tf)gKk`iN#7xV_!!O6d9L`fh2Gp6s#y@uPh%%H{|{6aOW``1MC*Fpoiv_%K_)u`B8=)dz#+`cvcC$Bgw zRca!PImp-H*waS;`rgwjZco8b;5OZV4gKdgr(4#sGXQe@&h9hK?r4mOmZm&E`{R?V zqbL0XSKJBTC)(r%O@rv=lV6pRo|Ji{G=?&4$8vNVCJmKj>#13+glfTQKuT_c^;rJX zw^&|csE#jNI*SsPEy+S4WG*47oORu{Db1gVy`-eMF{xa8_#w_Ro5;;c09jbxGlyBb zO&%Vp>|CC?D-5dpzP}*bFR~wxr~8zUthsm^{D4?3f!ve)kYSpaz9C#~e_3XP6yzzj z>n~7@9AS+zm)zzOuR4c2Kz$g6_cHG~#vo*vwURK-WCFLCHT#NqE%26IchE0n(^;Ea zjKfY2&nj>b;Pl31=9eDZ#%)?b6wy?YboVXZ&sxgiLP)D7B#U-D)nCLit=R6J9Dex~v(Q{9d%s>{b% ztk4y36@`@=Am0g?GLSJlunpRK)qzt2>6Aw303=ZBtrraUU}zA$9lBt zBz30_dClh5*N<#yIZ{fi(@_EMazq01zs{qWYYWata zlY1>e%vgswRtFsR&bjq``oB!c>k;5d+s;KgRFa(|-KlFU5eqo|AiIL(t%GFX8oY7$ zWpF|Kn`AR8K7H%_3iY{Mglg%7)3CgFet=oX6V#)A82@(86 zb4~Ee?J4S}=*1I%>SM{67GQuNfxrP8UaQ!?YH%gH*UnKZKHjl7Cklqs+b4qU@U;D) zWtz?~bp$pAG7`3qp4YT@^j}7D!n~)-pZubAa66OY6BKcb@09zE2jy=7QaXEYqNeBP zsuRP*(|>>!l*kQdi?Pv#cU~=9D<7)-09;($mWk?3l^I8r)fG#pmjRFz$DWkznb>k? z*w3A&@eX`v#^=yY6PCTv1o-^;s}1S_;b_xD*qPe_&Y1XqyJMh@)MI|!1EuidXjZSi{SzOIH5fB zXJdA`lRB*Mf`FiJH?R;f^YUQ0A@GS`I3>GBz5~*j*`qltCE|&&%E2J6J=qnq`!bx} z*iMffdI{yM`?Tx{`+3gdl`xA5+fxgWTJHYnJZsn#vIbu!#kU0|r ztE|M}e>eCz>U0qN8ZvpQ~SkDzW6|=#-FSWhgp#tQ~xwU$61zb#-6I4Vkqd|(f zymfw&Y7|T^OL?plR`FD}EW!tY`s71Ld~s^YiT+@NI;@l(9Bhd{T5%vJs9svcgQCkvIsEwV`&v}2ngbq%ZX zFCyT%zq&WKNm2*xGR9(IDN>NSQ_DpVt!qUB9KBTy{obFnvizB@(eC)$w&_hnD)v!2_;nrpi}nW&o^>}k!dBmN ztmhBO1A3w8Qn~6R4oH8#s(2GVg4$=Ic>wcTV3NcfgZ2ummHa z*RkK+uYAv&VLc63@S=9cw1S7*vEC-|f}zcrOz`5gWj*B$|D`8ic(!Tq3cVM9BIC4U zhyyK}KgPgIh(oOxJ!&_5Q;xa6IhP$|Fq2R!{(h`?*^PhTI3232q4!BAL?*?c+p5XX z)IS>-Y+hjzF>hbL*Jydnz6?1BsQtU8STx#8o-*5mtW5}IhoEwq2+?3qkbomqG=)D& znrqCm)N@6JVL+yvcz6ZEp^7MIXI}9&Qi=Bw?=x)qAxWDS1j6a^+7`C@S==Agq~CTD zKiz`OGa~1{c6uXQQL0>NNE&*?!1@QTozhI2laO*ezwK_Lq25*_|Lx0>B@5@r>+*Gx zoDbLZE1B6KjETCLYk$K$)`D&A4|x5HpNmvmfMu)cd<4HpXo{wrMqoJ#&@>-4ES7`{ z6|2~9(7fAuVz-Z`r-=Q$bf{E(f=uP_VdY5B{R;H>g-9iiH+mJB5mI{q@O30y+up7= zzKRWe@l03fx3Ivy$J0l(E@v<{bY_SLMDjQ4)1UaYl391h`PDh`*({P-kuPOK?q#9> zml1-BPvuMfhpmPzA1X5Y+!%cOSZ(aELhIQQki19~O|{Gl(nyNEq+@lNd#h~X3{ptd zW&UH#Xz6NI;QZV#jP)Lhr829a7gpx@vP;w12}_^HL*iL5v-vJ;)~iV#|M7+m029Zp z-F8F#C>e*0hKH_9z9Zf>!oC{9PcGDVFq?Dc(+;4 zqFc&LjImj)$)EU`*{04t03`WQhU1CCUYSjL0}JQIn8ctCBst$vazdHsf2+@@n)0^V zY!YSql@&^80Q$jR>NCI&?44+-idgnRWv5;QJ}YDcJT8x%e&T-N)C@DwEU+PB_R+`z zlPk)_QsTY!*g3sTdTF3yofB;r*HBoJ2{&;a%IS+0XQx7k85hm8jemX%_2*G(=jIA{ zyM}Ht{j0+j%D}W*Iq*0~3-SRAj*HpTAw=MVuaD+HW*-9}JS@oVg>!kev^rq*-Fz`J zVckc({K;b`nzB!zVK1Pv5&2uR2yNnU?TwH)+gbHGUN@in#4xlbH~J##*mW-!W`4q& zzeL%u1?AnlCoyWeSQ%tau^|4l^aZdd4;Ym>RKrV@&A?%1p2 zcT0c4Z!IiVYdJ0odGFCGx#kGu?vMXp*Rm~Lp<~jDfV9X#2 zQ$@SI?)sx@8$G{3KWiL&tLUMD?AlUEju?>z;*d( z-z~wIk6Py&(l%OgEfqfyujHuPeDh z=%&qoglC%JGkiO%-3`LxHgc!u6S7liL<9vx9-bcKDlWnN0VLG!6i(ESLYj;*KUx49Gc=J z|G6V86O^e&q`vq22Zm5S3Le4b%OX>0 z$mv41=_cbf7D-Y0hj3v=bA7|=Mkz>e5!)v2f~Q+mL{J_RoSpl=Lirb|A`&gr9){kJ z!TP}vyQmqdLW3+j7@|-^g0)R!pH2H(p_Yw%ZKkCnQm|-yo7JSM3~eDyVdR!W(ULvO zK9A|I7-Jqa1~~WacrqiTJoAzzXcGv2-DUftrr9w*-hdoIZKRx(AVPMir-+|eRux{6 zt=bZ$GjeCa#R26b95>9Q+l6M^@V#^MBPmPZRO$M0CiW*Z7fGFSNXX4dF}QZW%JNq_qJ|W3w_pA|Mrm>VJUZiv+&1P!&yrBaYlYB7qBNPHzx&DE0S~*k&b>?oyC5`Sm-7hzF zd@e1$Tj6hlJUv5`37(2JE>Y2TMO?x$7#^7wwRl=&+iOR(vx{3G7m z(X?JA5I1r{K4`RW2`>2&7?=U~#lx3^90j^V7tCYVATYN@5Lf?u>RaqxWOCv%TbUd4 z+$*lL@@RiOs@5-E2*$qE{r~;j|E)$56J)<9wM-6ik;nfAK1i|t`o6S)8_q@U6&me- z4gKeLrY+-L-Lb zaO-?`v`Lyh3QdlnU+;One~4b=t^vY=z}fX!{?NBrUOZNS8Sas#EHHb3&Qv$AW9BqH z6?oCN&bJ?QzcfeLi&a91&5=sn6+zN%D~gF+Sh!_wOq;+LCTjn|r{wypp=&s-Ili?> zvk9l^d2N-XQ0r=9hvX%??&!+DJm}2;0J_*AQsOLnlK+E-tY-~FgTfacY$m0;bX$tD z{mRt5kJ-(lk7ESl&KiPpb3=Mr7BRhIr!kCrxQ6>yXD2e@qGkNJ7)0Z?N$PdIp4aap ze(crk@pzBCTM#4a2zmbC!Y#9wiG!*1HB7e>T#Zgx1_4i`LGZT43VF>34TXysubvLaXxQjU$c!T z#lLv;#BVOSMCH;nA7{pPTtL zotgP#$RBG0bTPfTHT{`i9nqERJQ!(~SFNL{KVNa(Hv1+jhI|$P8Bx_cWZ$h#Qht2G z(29+l*t;HH11x**1R@zz5Y|^T5D835E&;TjDIba^glLp)1UqoIq63^AeWfYy8KKYY zV}~5$+FO3NnOi=4Wqd3wQx!ZCoJei6i(4yGFrh z-lNj(;*Ma<@g>{h{h$pF!ceX2l#JKa44ePf*3SCfe2|fY zrX0qb#oTo~6*(oRLy3Ld?A63jr%nV3hcam$yt@AaWQWgwS)B~QY;aw@BYM0t(pZ7hBEXA>Sk;`K`x0_|1 z&$X#yiAs-$R>$*uOXWV2<+HuA$GNUG>xf72t19+N+R}mH465HWtfh(V%Bx=FS=YFA{#Q4m`%R;_|jSN1@p4ygO003rQ`Al`DZa= z5)$-)mWM>yfONOKwoUe3<KW;kgq^>eHUl0QF3wl{4F&S|+A%1Mm!`=B8 zk?E%16&5SrudCFJ#8+y|X{4aBF-xIt)LH75aw4w2pi(*LShp{wV*w}e`R1Nz7#|_ zA_ax-CL7CjD<$LzkWzr%?H=hm`n5o>kJIX9 zj#eRH_o0{9HW`+v=<(_XSXEr!S2JE8za~`Zl$*cGFDz~4XP9m;KWbNElU;#X!rx~^ z46Kz@i^m-wMT*(iLQVI5WTLCHSfeD5k9=<+h`8P+QzQP~xm+j^vm-!bfHZ?$KocJ% z^7=~apOJJRlE2aAfu|QHu^W!KX71w4qKcNwpLg$w`h9_X_a;6)dorD2qd)ctFCvEQ zO7hf86fC1db!A&OL*gWn^VN&R&P5UKTnqScuI)X&j2j@u-#oMxz_c~iBe(-u4<`#`vAr9cb}QW*t*TDZr=$idiQiW?S;fe zP8mtP2AcLjcDy&K7l$-jB+aHKc z`(7$lXB!K8n|=WQHbEgn=x{d8|4YkK^wb$j=BM~H-n%?4)|i%OVRMPgF+6j_OBqg1 z(NtNzq4jo=OPbGkRKt2dg2}kcLF$z0?ZR_oTC+_$t~!Yv+`1x^!B@Ljw8|@OKw|ek z{zF-`wwP_)rb)tdn*2>q{?~3zX$HZUs!Y@sCNo+VT+X|-yx3XW72!(ycs3)@GMxLM z;W}$!_O?fCFo61lU;87zcuuVekR{Ay7G-vsh?m`!)4)k#jx5Y-9@GY|e}u1uyDRyn z>~VWU7zJZd)n)-|ndJpg#Vhgfk9ayksF9V{up%Dbl~mH~a{vmH@c6g1UVb^T`==(= z@I9o|R#V>bYoOF>^#yME!G6g{_u)zW#NiV(9TBu^yxjHWuO>TqK}}yBvDg(1;<;_m zv3_U3tTy=dm7oE|7p!kcAm%Bt`s-Z(`0B5tRr;z2;};A_EcF>rsUpS0CI)_-7OFd{ z3iQdiISU46P1>w?fkV>)@M43E7cv=U3fLTy1D}(KCh`JAB_XN-?;vGbIZvW z|HKf8gr!$AnT>6noH3u$#2uh{wOKNe4IKHZ|wuy>=36&}DhDY?8o6B8Na2+ZlO z1y8kYvSYh9Lh34VbwIN^YL-!xwEpiYnxJd`536OerjI#{iwGv8l2x}4h9dF)$HZ=4p%coO1<^Mm=8t;rfdGkW=oUJW|T%+!@21>k&&?^X32ili1ASJK>g2^DIWlJb1HX_ z5c@f~sF(4!x8gxc^}tP6c7py4bm6`eH<6#*E@6TeUU^AqcCg9XCIQIttEwh8mSdJ< z5}ma3WA=^y!e1~7yecmNy*xBIymV|!+S^Skh~FqqRh@Ta+p@j7w=hB1SKMX|^}77& z$(Hm_zGyFzpMT`F@inX_(f(<+|2; zKB6Gz?Pt&iKCcpWs2r)d85=