Asus RT-AC86U - Firmware update 386.9_0 (most recent update) breaks the easy-rsa package as there is no openssl-1.1.1.cnf file

[ColinTaylor]

Like me! If I'm not mistaken, firmware 384.xx didn't have these keys generated by default. That's why I learned this, and I didn't know it had changed.

AFAIK Merlin's firmware has always generated its own OpenVPN keys. Certainly it was doing it as far back as the 378.x firmware eight years ago when they moved from being stored in NVRAM to JFFS.

EDIT: Looks like the automatic certificate and key generation was added November 2013 (374.35).

 

[Tech9]

If I'm not mistaken, firmware 384.xx didn't have these keys generated by default

All home routers I've seen with OpenVPN Server option are doing everything automatically and the user just has to export the configuration file.

 

[abraxas86]

Like me! If I'm not mistaken, firmware 384.xx didn't have these keys generated by default. That's why I learned this, and I didn't know it had changed.

Are the keys and certs generated by the router good enough? If there is no advantage in using easy-rsa, then I have pone less thing to worry about...

How do you have your encryption stuff set up? The defaults give me dialup speeds lmao. If I turn it all the way off, I can watch HD video without issue over 4G. Wouldn't recommend it due to data costs, but I had some dats to burn and it was cool for testing haha

Trying to figure out how to get that sweet spot.

 

[Jaime Alvarez]

All home routers I've seen with OpenVPN Server option are doing everything automatically and the user just has to export the configuration file.

Then I've been doing extra work for nothing...

Now that I remember, I started configuring openVPN in my RT-N66U, using Tomato firmware... many moons ago.

 

[Jaime Alvarez]

How do you have your encryption stuff set up? The defaults give me dialup speeds lmao. If I turn it all the way off, I can watch HD video without issue over 4G. Wouldn't recommend it due to data costs, but I had some dats to burn and it was cool for testing haha

Trying to figure out how to get that sweet spot.

Just the defaults as you can see in my settings.

 

[abraxas86]

Just the defaults as you can see in my settings.

Weird, that's what I thought but I wasn't getting above like 5kbps down with the defaults set.

Something with the cypher is killing my connection. So far anything other than ncp-disable is basically unusable.

 

[Tech9]

Then I've been doing extra work for nothing...

Yes.

RT-N66U, using Tomato firmware... many moons ago

The new FreshTomato also does everything automatically now and you just need to export the configuration file. If you haven't seen this project yet and you have something compatible to run it on - take a look.

FreshTomato – Alternative open source firmware for Broadcom based routers

freshtomato.org

 

[Jaime Alvarez]

Thank you. My current config is set to allow individual users to connect withoout password (using their private key and cert). I'm assuming this is safe (please let me know if it isn't!).

The question that I have now is how could I generate those user-specific keys and certs in AsusWRT Merlin.