Search results

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. jrmwvu04

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    bind-dig as I recall. Been a while though.
  2. jrmwvu04

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    From my understanding, the verbiage “TLS server certificates and issuing CAs” is only used describing requirement for the 2048 bit rsa and sha-2 requirements. The other bullet points including the two year requirement are only for “TLS server certificates” so it seems those restrictions may not...
  3. jrmwvu04

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    I have no solution to offer but I was seeing this as well. Also a big uptick in the ucb counter. I’ve reverted to 2.2.1-1 for the time being because I’m frankly tired of testing all the new stuff. I’ve decided to take a break from it for a few days.
  4. jrmwvu04

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Yeah I’m overthinking again - pixelserv will be fine as is. I was thinking ahead to using the using the certificate for other uses like gui, etc.
  5. jrmwvu04

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Have you tested this out? At a glance I'm not sure you're satisfying this: TLS server certificates must present the DNS name of the server in the Subject Alternative Name extension of the certificate. DNS names in the CommonName of a certificate are no longer trusted. Asking. I know the merlin...
  6. jrmwvu04

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    That’s correct, but something must be amiss - all of the certificate generating sources I’ve seen have long included sha256. How is your cert generation? Should be something like this openssl req -new -x509 -key key.pem -sha256 -out cert.pem -days 730 -config /etc/openssl.config
  7. jrmwvu04

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    I'll be honest with you, if you are wanting to correct the problem as a matter of personal accomplishment or learning experience - those are the outdated instructions. You need to change the RSA from 1024 to 2048, change the 3650 days to something less than 825, and add the server auth EKU...
  8. jrmwvu04

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    That is because that was the current time stamp on the machine when Jack compiled. It’s not a problem.
  9. jrmwvu04

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Reading up on it, it doesn’t appear that will be useful for most people anymore. At some point between when I left and came back, Entware adopted OpenSSL 1.1.1 and I assume most people are using that install method. So, no worries. I’ll figure out my own thing or just switch to Entware
  10. jrmwvu04

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Were you able to build a statically linked binary yet?
  11. jrmwvu04

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Yeah, and there are still hurdles. I’m still working on it but no breakthroughs yet because frankly I’m a compiling novice. I can build it for amd64 Debian and everything is good there but there are considerations for building it for asuswrt platforms I have not figured out yet.
  12. jrmwvu04

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    tav is the statistic that tells you what pixelserv’s average response time is, lower is better, and there’s not much you can do to tweak it beyond run it on better hardware. There are options you can adjust to modify things, but as of 2.2.1 the best choices more or less are the default choices...
  13. jrmwvu04

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    The pixelserv process can be “running” but with some or all portions not serving correctly. I’ve seen that many times with pre release testing versions, though that’s not typically the case with public builds.
  14. jrmwvu04

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    I’ve uploaded Jack’s binaries to my Dropbox if anyone wants to test. https://dropbox.com/s/m1884645pvf5kxj/pixelserv-tls-2.3.tgz These are the binaries only, for the various asuswrt platforms. You will need to know what to do with them and what changes to make, and testing is at your own risk...
  15. jrmwvu04

    asus RT-AC88U to hot

    Those temps are not only not a problem, they’re actually pretty low.
  16. jrmwvu04

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    I'm able to build Jack's 2.3 pixelserv natively for ubuntu no problems. When I try to compile it for arm, configure complains that it can't find libcrypto as though the libssl-dev package was missing. @Jack Yaz get anywhere on those binaries?
  17. jrmwvu04

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Yeah, but I don't know how to build them. The information I've been able to find so far makes assumptions that you know how to get the build environment set up for all the various architectures you want to create - which I do not. Amen to that, brother.
  18. jrmwvu04

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Si señor. Without cross compiling, there are no binaries. But hey, progress.
Top