Beta Asuswrt-Merlin 386.14 beta is now available

[RMerlin]

Asuswrt-Merlin 386.14 beta is now available. The focus of this release is the merge of an updated GPL (probably the last GPL merge for the 386 series).

Reminder: 386.xx models are all on Asus' End of Life list since this spring. Asuswrt-Merlin will drop support for these models at the end of 2024.

July 6th 2024: 386.14 Beta 2 is now available. Changes since beta 1:

91a4ba0add Bumped version to beta 2
652db4cbc7 Revert "httpd: skip extra validation when setting filter_lwlist nvram"
1ec9405253 Updated documentation
889271e138 wps: add missing Makefile for SDK6 platform
185afb979e cfg_mnt: fix location of openssl.cnf; revert to upstream version of the gencert script
8534aa738d rom: update openssl.cnf with GPL changes, and move to /etc/

Changes since 386.13_2

  - UPDATED: Merged with GPL 386_52805.
  - UPDATED: wget to 1.24.5.
  - FIXED: WPS wouldn't start on RT-AC68U (note: starting through
           webui was fixed, however starting through button is
           still broken for the RT-AC66U_B1, including with
           stock firmware).

Please keep discussions on the topic of this specific beta release.

Downloads are here.
Changelog is here.

 

[RMerlin]

Known issue:

• httpds fails to start (unable to generate certificate due to missing /etc/openssl.cnf symlink) (Fixed in beta 2)

 

[kernol]

Working without issues on my RT-AC86U ... save for the expected problems with webui add-ons provided by @Jack Yaz such as Diversion Stats and Scribe UI as well as Skynet webui page from @Adamm. - Can't scroll up or down the page - scroll bar vanishes.

I don't expect those to be sorted by the affected authors before final release version.

Most importantly - the new Asus provided GPL rides well on this router .
Many thanks again - for sticking with these soon to be "legacy" routers for 2024.

 

[Clark Griswald]

Most importantly - the new Asus provided GPL rides well on this router .
Many thanks again - for sticking with these soon to be "legacy" routers for 2024.

+1

Dirty Upgrade from previous RMerlin Release.
Although I am using the 86U as an AP, everything is working well!
I was also presented with two separate "Asus Privacy Agreements", which isn't a concern, but just a "legal heads-up".

YMMV: I did have issues with the main download site, which for the past few hours has only downloaded at 80kb or less, and used the mirror site which was fast.

 

[heysoundude]

I shall wait, as always, for the full release.

 

[kernol]

I shall wait, as always, for the full release.

Sensible for you given that the Asus GPL used in this Beta seems to be shipped with Chart.js 3.9 which, as explained elsewhere, is not backwards compatible with Chart.js 2.x used in many of the add-ons you have in your signature.

 

[patsio]

oh, good to see that @GNUton has already released a beta for my old DSL-AC68U!

Release Unstable: 386.14_0-gnuton0_beta1 · gnuton/asuswrt-merlin.ng

GNUton's Asus Merlin changelog Date: July 01, 2024 Release: 386.14_0-gnuton0_beta1 UPDATED: Merged with GPL 386_52805.

github.com

 

[RMerlin]

Sensible for you given that the Asus GPL used in this Beta seems to be shipped with Chart.js 3.9

No, chart.js was not updated in this release.

 

[TurnstileBlues]

I can't seem to install it on my RT-AC66U B1.
Using the 68U release, as has previously worked.

I'll wait for final release.

Thank you for continuing to support.

 

[RMerlin]

I can't seem to install it on my RT-AC66U B1.
Using the 68U release, as has previously worked.

I'll wait for final release.

Thank you for continuing to support.

Make sure you aren't confusing RT-AC68U with RT-AC86U.

 

[TurnstileBlues]

Make sure you aren't confusing RT-AC68U with RT-AC86U.

That's exactly what I have done, twice.
Doesn't help that my other device is an 86.
My brain is melting.

 

[RMerlin]

That's exactly what I have done, twice.
Doesn't help that my other device is an 86.
My brain is melting.

The good news is that Asus does model validation before flashing whatever file is being provided by the user.

 

[kernol]

No, chart.js was not updated in this release.

Thanks for confirmation. In that case something else is causing each of the add-on webui pages to fault on the scrolling ability. I have tried Chrome, Firefox and Edge - all fail to provide screen scroll only on the webui pages provided by Diversion Stats [from @Jack Yaz ?] - Skynet from @Adamm and Scribe ui from @Jack Yaz.

Oh ... and I have flushed each browsers cache thoroughly - no improvement.

 

[episyron]

I did dirty upgrade from 386.13_2 to 386.14_beta1 in RT-AC86U. Couldn't connect webui any more, but managed to ssh to the router and noticed that httpds wasn't running, it is started constantly and fails:

Jul  3 19:58:45 RT-AC86U: start https:8443
Jul  3 19:58:46 RT-AC86U: start httpd:80
Jul  3 19:58:46 httpd: Restore saved SSL certificate...8443
Jul  3 19:58:46 httpd: Generating SSL certificate...8443
Jul  3 19:58:47 admin: Root certificate updated, auto-generated.
Jul  3 19:58:52 admin: Server certificate updated.
Jul  3 19:58:52 httpd: Failed to initialize SSL, generating new key/cert...8443
Jul  3 19:58:52 httpd: Restore saved SSL certificate...8443
Jul  3 19:58:52 httpd: Generating SSL certificate...8443
Jul  3 19:58:53 admin: Root certificate updated, auto-generated.
Jul  3 19:58:55 admin: Server certificate updated.
Jul  3 19:58:55 httpd: Failed to initialize SSL, generating new key/cert...8443
Jul  3 19:58:55 httpd: Unable to start in SSL mode, exiting! 8443
Jul  3 19:59:12 watchdog: start httpd
Jul  3 19:59:12 rc_service: watchdog 1409:notify_rc start_httpd
Jul  3 19:59:12 custom_script: Running /jffs/scripts/service-event (args: start httpd)
Jul  3 19:59:12 admin: Root certificate updated, auto-generated.
Jul  3 19:59:14 admin: Server certificate updated.
Jul  3 19:59:14 RT-AC86U: start https:8443
Jul  3 19:59:14 RT-AC86U: start httpd:80
Jul  3 19:59:14 httpd: Restore saved SSL certificate...8443
Jul  3 19:59:14 httpd: Generating SSL certificate...8443
Jul  3 19:59:17 admin: Root certificate updated, auto-generated.
Jul  3 19:59:19 admin: Server certificate updated.
Jul  3 19:59:19 httpd: Failed to initialize SSL, generating new key/cert...8443
Jul  3 19:59:19 httpd: Restore saved SSL certificate...8443
Jul  3 19:59:19 httpd: Generating SSL certificate...8443
Jul  3 19:59:20 admin: Root certificate updated, auto-generated.
Jul  3 19:59:22 admin: Server certificate updated.
Jul  3 19:59:22 httpd: Failed to initialize SSL, generating new key/cert...8443
Jul  3 19:59:22 httpd: Unable to start in SSL mode, exiting! 8443
Jul  3 19:59:42 watchdog: start httpd
Jul  3 19:59:42 rc_service: watchdog 1409:notify_rc start_httpd
Jul  3 19:59:42 custom_script: Running /jffs/scripts/service-event (args: start httpd)

Any ideas what could cause this, and is the full reset only option to resolve this?

Addons installed: amtm (4.9), Diversion (5.1.3)

 

[RMerlin]

Any ideas what could cause this, and is the full reset only option to resolve this?

What were you using as SSL certificate? Auto generated, Let's Encrypt, or were you providing your own?

As a workaround, you can disable HTTPS support:

nvram set http_enable=1
nvram commit
service restart_httpd

 

[RMerlin]

What were you using as SSL certificate? Auto generated, Let's Encrypt, or were you providing your own?

As a workaround, you can disable HTTPS support:

nvram set http_enable=1
nvram commit
service restart_httpd

I was able to reproduce it following a reboot. /etc/openssl.cnf symlink is missing, so the script that generates the certificate fails.

 

[episyron]

I was able to reproduce it following a reboot. /etc/openssl.cnf symlink is missing, so the script that generates the certificate fails.

I use auto generated SSL certificate. Thanks for the workaround suggestion, but unfortunately it did not work for me, httpd still tries to start in SSL mode, and fails with same messages in syslog. There is one httpd process listening in the port 80, but only on loopback.

tcp        0      0 127.0.0.1:80            0.0.0.0:*               LISTEN      1393/httpd

Actually I have /etc/openssl.cnf symlink:

# ll /etc/openssl.cnf
lrwxrwxrwx    1 admin    root            20 Jan  1  1970 /etc/openssl.cnf -> /rom/etc/openssl.cnf

I don't know if this is related or used, but the scrip for this link is missing:

# ll /etc/rc3.d/S50ssl
lrwxrwxrwx    1 admin    root            16 Jul  1 06:49 /etc/rc3.d/S50ssl -> ../init.d/ssl.sh

/rom/etc/rc3.d# ll ../init.d/ssl.sh
ls: ../init.d/ssl.sh: No such file or directory

 

[eff981]

@RMerlin Hi, sorry for the tag. Do you know if there's a way to enable flow control with Merlin fw on routers? Is there a command code to enable it? On ASUS ROG GT-AX6000 (which I'm using right now) it's enabled by default, but not on the others (for example on GT-AXE16000).
Thank you in advance!

 

[Mutzli]

@RMerlin Hi, sorry for the tag. Do you know if there's a way to enable flow control with Merlin fw on routers? Is there a command code to enable it? On ASUS ROG GT-AX6000 (which I'm using right now) it's enabled by default, but not on the others (for example on GT-AXE16000).
Thank you in advance!

Do you use Cake QoS on the other router? Flow Cache is off with Cake active.

 

[RMerlin]

Actually I have /etc/openssl.cnf symlink:

The 386.14 beta has it under /etc/ssl/ instead, which is why it fails. I was able to reproduce and fix the issue here on my own RT-AC68U.

don't know if this is related or used, but the scrip for this link is missing:

Leftover from the original Broadcom SDK, Asuswrt does not use it.