Release Asuswrt-Merlin 386.3 is now available

[Megahurtz]

I recently updated to 386.3_2 and don't have an option to view my OpenVPN server's client passwords anymore. On 386.2 there was a check box you could enable to view each client's passwords on the VPN>VPN Server page, but it appears to be missing now.

Is there any way to view my OpenVPN server's client passwords in plain text from a ssh session?

 

[John Adler]

dirty update
all working fine so far
thxs Merlin

 

[RMerlin]

Is there any way to view my OpenVPN server's client passwords in plain text from a ssh session?

No, they are now encrypted.

 

[Megahurtz]

No, they are now encrypted.

Well, that explains why I can't view them anymore! I guess I need to figure out a way to remember them now that I can't just look them up in the router

 

[QuikSilver]

Well, that explains why I can't view them anymore! I guess I need to figure out a way to remember them now that I can't just look them up in the router

I hear sticky notes hidden under a keyboard work great.

 

[Morris]

I hear sticky notes hidden under a keyboard work great.

Use a Sharpie, sticky notes can fall off and get lost!

 

[Nick_J]

The Edit function of the VPN Director page is really handy.

Thank you Merlin

 

[RMerlin]

Well, that explains why I can't view them anymore! I guess I need to figure out a way to remember them now that I can't just look them up in the router

Keepass.

 

[Hazel]

Well, that explains why I can't view them anymore! I guess I need to figure out a way to remember them now that I can't just look them up in the router

Bitwarden

 

[pirx73]

@RMerlin - can I ask for one feature to be implemented in the future releases?
HTTP-->HTTPS redirect. If HTTPS-only mode is enabled, accessing router with http will redirect it to https
Yes, i am lazy and tired from writing https://router_ip/dns:8443

Also i noticed one tiny issue with router's web in browser console:

VM9:1 Mixed Content: The page at 'https://myrouter:8443/index.asp' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint
'http://nw-dlcdnet.asus.com/plugin/js/extend_custom_icon.json'. This request has been blocked; the content must be served over HTTPS.

I checked and

https://nw-dlcdnet.asus.com/plugin/js/extend_custom_icon.json

also answers.

[Deprecation] Synchronous XMLHttpRequest on the main thread is deprecated because of its detrimental effects to the end user's experience. For more help, check https://xhr.spec.whatwg.org/.
send @ jquery.js:5

 

[Jack Yaz]

@RMerlin - can I ask for one feature to be implemented in the future releases?
HTTP-->HTTPS redirect. If HTTPS-only mode is enabled, accessing router with http will redirect it to https
Yes, i am lazy and tired from writing https://router_ip/dns:8443

use a bookmark? ;-)

Also i noticed one tiny issue with router's web in browser console:

VM9:1 Mixed Content: The page at 'https://myrouter:8443/index.asp' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint
'http://nw-dlcdnet.asus.com/plugin/js/extend_custom_icon.json'. This request has been blocked; the content must be served over HTTPS.

I checked and

https://nw-dlcdnet.asus.com/plugin/js/extend_custom_icon.json

also answers.

webui: move extended custom icon database to local file · RMerl/asuswrt-merlin.ng@8f4afe6

Third party firmware for Asus routers (newer codebase) - webui: move extended custom icon database to local file · RMerl/asuswrt-merlin.ng@8f4afe6

github.com

[Deprecation] Synchronous XMLHttpRequest on the main thread is deprecated because of its detrimental effects to the end user's experience. For more help, check https://xhr.spec.whatwg.org/.
send @ jquery.js:5

that message is coming from jquery. i suspect changing the jquery version is non-trivial as it would require thorough testing of the entire webui, plus moves away from what Asus provide

 

[tzchen]

Have you been doing "dirty upgrades"? If so....it may be time to start from scratch on the AX86u unit.

I always doing clean upgrades


before and after upgrades firmware
i must clean nvram to rest reset factory

 

[Howard_inGA]

Keepass.

Amen! Stored in a Nordlocker if one is really concerned...

 

[syn959]

Hi, I'm liking the latest update with VPN Director with my RT-AC88U, but noticed a strange issue with 386.3_2 that I didn't with 386.3.

I have 5 OVPN clients populated, with different source IPs / rules assigned to each. However, I found that the client machines will only connect to which ever OVPN client was started first. If I started OVPN client #2 first, all machines will connect to OVPN client #2 and ignore the rules that were defined. I verified by running command "dig TXT +short o-o.myaddr.l.google.com @ns1.google.com | sed 's/"//g'" on client machines and also OVPN client packet activity on router.

VPN Director rules defined below:

ip rule:

ip route:

I've tried factory reset, flash, and re-config with same results. Similar setup was working fine with 386.3 with machines connecting to OVPN clients defined.

Thanks and kind regards,
-Steve

 

[Tomo]

Saturday i upgraded main router Ac86u and Ac68U (imesh) from 384.17 to the latest 386.3.2 , fresh install and all working fine, only +5°C.
Great work Merlin !!

 

[pirx73]

use a bookmark? ;-)

Et tu, Brute? Thanks Cap, i was unware of this feature...
Since our routers run httpd 2 (at least that's how router's web server identifies itself) i wasn't sure can i enable redirection myself and which method would work.

webui: move extended custom icon database to local file · RMerl/asuswrt-merlin.ng@8f4afe6

Third party firmware for Asus routers (newer codebase) - webui: move extended custom icon database to local file · RMerl/asuswrt-merlin.ng@8f4afe6

github.com

that message is coming from jquery. i suspect changing the jquery version is non-trivial as it would require thorough testing of the entire webui, plus moves away from what Asus provide

Thanks for the explanation. Just wanted to point that out.

 

[ColinTaylor]

Since our routers run httpd 2 ...

No it doesn't. It runs a version of milli_httpd that's been significantly modified by Asus.

 

[pirx73]

No it doesn't. It runs a version of milli_httpd that's been significantly modified by Asus.

Thanks! I'll check how to configure it, maybe there's a way.
http2 is the name router's web server returns when queried

 

[ColinTaylor]

Thanks! I'll check how to configure it, maybe there's a way.
http2 is the name router's web server returns when queried

It's not configurable (this has been asked before) because it's not a "normal" web server.

 

[pirx73]

I see. Ah well... then back to the old way. Thanks!