[Beta] Asuswrt-Merlin 384.10 Beta is now available

[RMerlin]

Asuswrt-Merlin 384.10 beta is now available for all supported models. The focus of this release is the partial transition to OpenSSL 1.1.x.

21-March: Beta 3 is now available:

314329e5c2 Updated documentation
99c64f99f8 Bumped revision to beta 3
a45ceea61c libvpn: allow erasing a key/cert by providing an empty one
2204f05a5e libvpn: resetting to default wasn't clearing client extra CA certificate
58c2fda137 shared: remove indexed vpn_crt_* entries from default nvram settings
708ee2bb7c httpd: webui: display client's bandwidth on wireless log page
c4583ee465 httpd: do not link with libletsencrypt when OpenSSL 1.1.x is enabled due to mismatched openssl versions
61380ae127 httpd: add emailAddress attribute to generated certificate
7225891383 (rtax88) Merge with 384_5640 GPL
7dbff248a1 webui: Classification page fixes: hide filters on empty list, remove undefined class popup in non-aQoS mode

17-March: Beta 2 is now available:

0949acc4e3 Updated documentation
bee21ea139 webui: apply Classification filter after IPv6 have been compressed, so the filter gets applied to the displayed version
0968d34c83 Updated documentation
03881a1621 webui: implemented filtering to the Classification page; fixed typo in current_page parameter
54755feb1c webui: Re-implemented tracked connections table without using a Table object
29d312caa6 shared: moved dns_local setting to the section with other Merlin-specific settings
2b4fff3cd2 www/rc: make using dnsmasq as system resolver optional
840dcda2c6 webui: let the Ajax call handle the first chart/table rendering; also bump auto-refresh threshold to 500 entries
a1d5949863 strongswan: remove 5.2.1 leftovers
61eda56fdf minidlna: added gitignore
b52368af9d nano: updated gitignore
45cd22f190 strongswan: added gitignore
e98bc01433 wget: updated gitignore
df7bed4afd Bumped revision to beta 2
efeb6c12eb Updated documentation
08e73a90d9 lighttpd: fix location of modules on HND-AX
7ea734eaa6 pppd: implement lcp-ident option
8225488882 nfs-utils-1.3.4: fix rebuild after clean
c12629a30e libmnl: fix rebuild after clean
9a5c206f4f rp-pppoe: relay: fix crash
2938a77cbe pppd: pppoe-plugin,rp-pppoe: fix host-uniq option support
5670357618 pppd: pppoe-plugin,rp-pppoe: switch to monotonic time
045849eb50 pppd: switch to monotonic time
62b42d629b pppd: fix warning w/o IPv6
67090e2b67 pppd: add support for custom pap-secrets file location
05f8d80d81 dnsmasq: update to 2.80-44-g608aa9f
7cf798767a avahi: recover .gitignore files
fd2195411c rc: rework dns stub
fd486d5c00 openssl11: recover missed files from 1.1.1b
3f40055e12 openssl11: add gitignore to the tree
ab29470364 openssl11: remove temp file accidentally included in commit
c7b584c3f4 (tag: 384.10-beta1) Updated documentation

• Added OpenSSL 1.1.1b in parallel to 1.0.2. Only some services are linked with OpenSSL 1.1.x, the precompiled portions of the firmware are still linked with 1.0.2 (only Asus can recompile these against 1.1.x). The most relevant services linked against 1.1.1:
  o httpd (the webui)
  o OpenVPN
  o In-a-dyn
  o Strongswan
  o Netatalk
  o vsftpd
  o net-snmp
  o Tor
  
  The userspace "openssl" tool is called openssl11.
  
• Merged with GPL 384-5640 (RT-AX88U)
• Updated components: OpenSSL 1.0 (1.0.2r), OpenVPN (2.4.7), curl (7.64.0), Tor (0.3.5.8), Strongswan (5.7.2). dnsmasq (2.81-g6799320)
• Fixed Samba compatibility issue with recent Tuxera NTFS driver.
• Fixed NFSv2 support (and enabled on HND models).
• Enhancements to OpenVPN key/certs storage and management
• Various other fixes and tweaks

Please see the included changelog for details.

Things in need of particular testing during this beta cycle:

• Webui over https
• OpenVPN
• Tor
• IPSec
• beta 2: Revamped Classification page
• beta 3: OpenVPN key/certs management

OpenSSL 1.1.1 introduces TLS 1.3 support, as well as support for Chacha20 cipher. Note that the webui will prioritize Chacha20 over AES for router models without AES acceleration, which might improve performance slightly on these models.

Please keep the topic in this thread on this specific beta release.

Downloads are here.
Changelog is here.

 

[RMerlin]

Known issues:

• AiCloud does not work on the RT-AX88U (fixed for Beta 2)
• dnsmasq randomly reporting being unable to send a packet: unable to reproduce the issue so far.

 

[skeal]

I can confirm the https webui works just fine, so far, on my AX88U (webui is not exposed to WAN). I am however having a strange issue with one of my OVPN clients. The issue with VPN is hard to explain at this point I will do more testing to rule out as much as I can. The upgrade went flawless. Thanks Eric!

 

[Treadler]

Webui over https all good here......

 

[JSinFCVA]

Upgrade went fine. No issues so far.

 

[barrybulb]

All good here thankyou, RT-AC5300

 

[Striker317]

No new GPL drop vs 384.9? I’m guessing since this is beta, we’ll have to wait til 384.11 for inclusion of any new GPL drop?

 

[RMerlin]

No new GPL drop vs 384.9? I’m guessing since this is beta, we’ll have to wait til 384.11 for inclusion of any new GPL drop?

No. I do have the 384_5640 GPL for the RT-AX88U, but I intend to focus 384.10 on the OpenSSL switch.

 

[Zastoff]

Beta 1 working fine here
Webui over https and OpenVPN server/client all good

 

[AndreiV]

AC3200 :

Beta flashed and running okay. HTTPS for GUI is a bit slow but otherwise working fine.

 

[scjr]

Smooth upgrade on my rt-ac1900p. Thank you.

 

[penguin22]

With 13 days stable on 384.9, took the plunge with 384.10 on AC86U, AC68P, and AC3200 with no issues to report thus far.

 

[Alfsu]

Smooth update on AC86U:

Web interface:

OpenVPN:

 

[no_name]

Upgraded RT-AC86U from 384.10_alpha2 to 384.10_beta1 followed by factory reset and manual configuration, no problems with vpn & https


Sent from my iPad using Tapatalk

 

[taffeys]

Running well on my RT-AC3100. Waiting for new GPL drop and 384.11 to fix Network Map and AiProtection issues.

 

[RMerlin]

Running well on my RT-AC3100. Waiting for new GPL drop and 384.11 to fix Network Map and AiProtection issues.

Asus hasn't released anything newer than the GPL code used in 384.10 for your router.

 

[taffeys]

Asus hasn't released anything newer than the GPL code used in 384.10 for your router.

Thanks Eric; I am aware of that. Also, I have noticed that 384.10 Beta1 is seems to respond and process more quickly than 384.9.

 

[Mutzli]

Dirty upgrade on RT-AX88U from 864.9 to 384.10_beta1. So far everything runs as expected.

 

[penguin22]

Failed to mention, running OpenVPN from my AC86U with this build and having no issues.

 

[skeal]

I can confirm the https webui works just fine, so far, on my AX88U (webui is not exposed to WAN). I am however having a strange issue with one of my OVPN clients. The issue with VPN is hard to explain at this point I will do more testing to rule out as much as I can. The upgrade went flawless. Thanks Eric!

Just a follow up, OVPN is working fine both server and clients. This is a good Beta!