[384.10_Alpha - builds] Testing all variants.

[dexter94]

tried the .9 and the new test build... and nothing

 

[RMerlin]

Not sure if you are using the recovery tool or the miniweb interface, but give the miniweb interface a go. It's what I used earlier today while flashing test builds on my RT-AC87U.

 

[Zastoff]

Smooth update to 384.10_alpha2-g6410b35f58 on RT-AC87u
All is working
Thanks RMerlin
Any plans to go for Openssl 1.1.1b?

 

[Sicario]

Any plans to go for Openssl 1.1.1b?

https://github.com/RMerl/asuswrt-merlin.ng/commit/10156f7c4a1798994a0a63c460cb079d515b0f6b

 

[laracroftonline]

Seems to work fine on my 5300!

 

[dexter94]

Not sure if you are using the recovery tool or the miniweb interface, but give the miniweb interface a go. It's what I used earlier today while flashing test builds on my RT-AC87U.

The tool... in what ip can I access to the webui?

 

[RMerlin]

The tool... in what ip can I access to the webui?

Either 192.168.1.1 or the IP you usually have your router set to (it depends on your bootloader version).

Make sure your computer has an IP address within the same range as the router first.

 

[dexter94]

Either 192.168.1.1 or the IP you usually have your router set to (it depends on your bootloader version).

Make sure your computer has an IP address within the same range as the router first.

Ok thanks Merlin, finally at the four intent via the web has finally uploaded the file...

 

[D_Day]

Flashed my AC68U and AC86U and both working well. Dcd crashes are still there on the AC86U though.

 

[no_name]

Flashed 384.10_Alpha - build to RT-AC86U, reset router with manual configuration and all appears fine


Sent from my iPad using Tapatalk

 

[Gar]

Been working fine since yesterday on 1900p until I changed to https. It loops at "TLS handshake 192.168.1.1..." using Firefox. Didn't think to clear cache or try another browser before reset, don't know if that would have mattered. All is OK again after reset using http on same browser without clearing cache.

Update: Tried it again with clear caches on Firefox, IE and Edge but it makes no dif, can't log in with https. Works great with http. I do recall login being slower on my old 56u with https. Maybe it's me somehow?

 

[SMS786]

Loaded RT-AC68U_384.10_alpha2-g8bdff96906 on my 68U last night and everything seems to be buzzing along smoothly. Thank you @RMerlin!

I use a OpenVPN server on the router to connect to my LAN when on the road. Are there any special settings to toggle, or commands to use, to make sure OpenSSL 1.1.1 and TLS 1.3 are utilized when connecting to my router's server? All my clients have already been updated to OVPN 2.4.7 btw.

 

[RMerlin]

Loaded RT-AC68U_384.10_alpha2-g8bdff96906 on my 68U last night and everything seems to be buzzing along smoothly. Thank you @RMerlin!

I use a OpenVPN server on the router to connect to my LAN when on the road. Are there any special settings to toggle, or commands to use, to make sure OpenSSL 1.1.1 and TLS 1.3 are utilized when connecting to my router's server? All my clients have already been updated to OVPN 2.4.7 btw.

I don't know, you'd have to check the OpenVPN documentation on how to force the control channel to use TLS 1.3 (with an appropriate cipher).

 

[RMerlin]

Someone else have same problem with FTP-server???

Works on my RT-AC86U, but segfaults at start on my RT-AC5300.

Flashed my AC68U and AC86U and both working well. Dcd crashes are still there on the AC86U though.

Only Asus and Broadcom can fix that, and they haven't released any fix yet.

 

[RMerlin]

Loaded RT-AC68U_384.10_alpha2-g8bdff96906 on my 68U last night and everything seems to be buzzing along smoothly. Thank you @RMerlin!

I use a OpenVPN server on the router to connect to my LAN when on the road. Are there any special settings to toggle, or commands to use, to make sure OpenSSL 1.1.1 and TLS 1.3 are utilized when connecting to my router's server? All my clients have already been updated to OVPN 2.4.7 btw.

I can at least confirm that it works without any special configuration when connecting two Asus routers together.

Feb 28 00:36:06 ovpn-client2[19600]: OpenVPN 2.4.7 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Feb 25 2019
Feb 28 00:36:06 ovpn-client2[19600]: library versions: OpenSSL 1.1.1a  20 Nov 2018, LZO 2.08
Feb 28 00:36:06 ovpn-client2[19601]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Feb 28 00:36:06 ovpn-client2[19601]: TCP/UDP: Preserving recently used remote address: [AF_INET]192.168.10.183:1194
Feb 28 00:36:06 ovpn-client2[19601]: Socket Buffers: R=[122880->122880] S=[122880->122880]
Feb 28 00:36:06 ovpn-client2[19601]: UDP link local: (not bound)
Feb 28 00:36:06 ovpn-client2[19601]: UDP link remote: [AF_INET]192.168.10.183:1194
Feb 28 00:36:06 ovpn-client2[19601]: TLS: Initial packet from [AF_INET]192.168.10.183:1194, sid=1df4803c bdb5f55f
Feb 28 00:36:06 ovpn-client2[19601]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Feb 28 00:36:06 ovpn-client2[19601]: VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-AC86U, emailAddress=me@myhost.mydomain
Feb 28 00:36:06 ovpn-client2[19601]: VERIFY KU OK
Feb 28 00:36:06 ovpn-client2[19601]: Validating certificate extended key usage
Feb 28 00:36:06 ovpn-client2[19601]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Feb 28 00:36:06 ovpn-client2[19601]: VERIFY EKU OK
Feb 28 00:36:06 ovpn-client2[19601]: VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-AC86U, emailAddress=me@myhost.mydomain
Feb 28 00:36:06 ovpn-client2[19601]: Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 1024 bit RSA
Feb 28 00:36:06 ovpn-client2[19601]: [RT-AC86U] Peer Connection Initiated with [AF_INET]192.168.10.183:1194
Feb 28 00:36:07 ovpn-client2[19601]: SENT CONTROL [RT-AC86U]: 'PUSH_REQUEST' (status=1)
Feb 28 00:36:07 ovpn-client2[19601]: PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0 vpn_gateway 500,route-gateway 10.8.0.1,topology subnet,ping 15,ping-restart 60,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Feb 28 00:36:07 ovpn-client2[19601]: OPTIONS IMPORT: timers and/or timeouts modified
Feb 28 00:36:07 ovpn-client2[19601]: OPTIONS IMPORT: --ifconfig/up options modified
Feb 28 00:36:07 ovpn-client2[19601]: OPTIONS IMPORT: route options modified
Feb 28 00:36:07 ovpn-client2[19601]: OPTIONS IMPORT: route-related options modified
Feb 28 00:36:07 ovpn-client2[19601]: OPTIONS IMPORT: peer-id set
Feb 28 00:36:07 ovpn-client2[19601]: OPTIONS IMPORT: adjusting link_mtu to 1624
Feb 28 00:36:07 ovpn-client2[19601]: OPTIONS IMPORT: data channel crypto options modified
Feb 28 00:36:07 ovpn-client2[19601]: Data Channel: using negotiated cipher 'AES-256-GCM'
Feb 28 00:36:07 ovpn-client2[19601]: Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Feb 28 00:36:07 ovpn-client2[19601]: Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Feb 28 00:36:07 ovpn-client2[19601]: TUN/TAP device tun12 opened
Feb 28 00:36:07 ovpn-client2[19601]: TUN/TAP TX queue length set to 100
Feb 28 00:36:07 ovpn-client2[19601]: /usr/sbin/ip link set dev tun12 up mtu 1500
Feb 28 00:36:07 ovpn-client2[19601]: /usr/sbin/ip addr add dev tun12 10.8.0.2/24 broadcast 10.8.0.255
Feb 28 00:36:07 ovpn-client2[19601]: updown.sh tun12 1500 1552 10.8.0.2 255.255.255.0 init
Feb 28 00:36:10 ovpn-client2[19601]: Ignore conflicted routing rule: 192.168.1.0 255.255.255.0
Feb 28 00:36:10 ovpn-client2[19601]: Initialization Sequence Completed

 

[Adamm]

@RMerlin Did you end up having any luck tracking down the fwmark issue on the AX88U branch as described in this post? Let me know if you need any additional information.

 

[RMerlin]

@RMerlin Did you end up having any luck tracking down the fwmark issue on the AX88U branch as described in this post? Let me know if you need any additional information.

No, still busy dealing with OpenSSL 1.1.x (and work has also been limiting my free time this week).

tc ain't really my field of expertise either. All I know right now is that it was working fine through the webui.

 

[RMerlin]

Also note that bits 8-31 are used by Trend Micro, so you cannot use any of these without running the chance that they will be overwritten by bwdpi. Only bits 0-7 are available for non-Trend Micro usage. You should test using these bits instead.

 

[octopus]

Works on my RT-AC86U, but segfaults at start on my RT-AC5300.

Thank you.
I think there is problem with my androidapp "AndFTP" get java error when trying to connect.
Maby some have a clue whats happend here???

EDIT: I se a difference in PASV ports here. It should be between 57530 - 57560.

java.net onnectExemtion faild to connect
octopus.afraid.org "my wan ip number here" (port21)/
from 192.168.1.152 (port 58208) after
3000ms is connected fail
ECONNREFUSED
(connection refused)

Thanks for your patience.

 

[bigcid10]

Flashed 384.10 a2 on my 88u and no issues to speak of
seems to run great!,Thank you