firmware 3.0.0.4_376.49_5 openvpn issue

[monabhai420]

Hello,
RT-AC56U
I am not able to connect to openvpn when i use the latest merlin version. openvpn works perfectly with older firmware but not with new one.

Here is full router log if you want to see.

https://gist.github.com/anonymous/0763c02d46a713be37d5

Dec 31 19:00:40 openvpn[722]: ******* WARNING *******: null cipher specified, no encryption will be used
Dec 31 19:00:40 openvpn[722]: ******* WARNING *******: null MAC specified, no authentication will be used

 

[RMerlin]

Hello,
RT-AC56U
I am not able to connect to openvpn when i use the latest merlin version. openvpn works perfectly with older firmware but not with new one.

Here is full router log if you want to see.

https://gist.github.com/anonymous/0763c02d46a713be37d5

Dec 31 19:00:40 openvpn[722]: ******* WARNING *******: null cipher specified, no encryption will be used
Dec 31 19:00:40 openvpn[722]: ******* WARNING *******: null MAC specified, no authentication will be used

There's a bug in OpenVPN 2.3.6 that causes it to crash when using a NULL cipher. Switch to a real cipher to resolve the issue.

Using a null cipher should only be used for troubleshooting, otherwise your tunnel will have no encryption.

 

[steven168]

There's a bug in OpenVPN 2.3.6 that causes it to crash when using a NULL cipher. Switch to a real cipher to resolve the issue.

Using a null cipher should only be used for troubleshooting, otherwise your tunnel will have no encryption.

NULL cipher, u mean none?

i use defauilt, will it has issue?

 

[RMerlin]

NULL cipher, u mean none?

i use defauilt, will it has issue?

No idea, but your log did show that the cipher was "Null". Set it to something specific, like AES-128-CBC.

 

[monabhai420]

There's a bug in OpenVPN 2.3.6 that causes it to crash when using a NULL cipher. Switch to a real cipher to resolve the issue.

Using a null cipher should only be used for troubleshooting, otherwise your tunnel will have no encryption.

by enabling cipher AES-128-CBC openvpn speed is decreasing. Any reason why?

Thanks

 

[RMerlin]

by enabling cipher AES-128-CBC openvpn speed is decreasing. Any reason why?

Thanks

AES-128-CBC versus what were you using previously?

If you had no cypher, then it's perfectly normal - encryption adds both CPU and network overhead over regular traffic.

 

[monabhai420]

AES-128-CBC versus what were you using previously?

If you had no cypher, then it's perfectly normal - encryption adds both CPU and network overhead over regular traffic.

I was using no cypher. but when i use no cypher with new firmware then it would not connect lol. This is disgusting. do you think i should switch back to old firmware and use client 2?

Thanks

 

[RMerlin]

This is disgusting.

Chill, it's just a bug, and one that was in OpenVPN to begin it, not in the firmware itself. I specifically waited weeks before upgrading OpenVPN, and turns out the issue came out only much later.

Either enable encryption (it makes no sense to use no encryption on a VPN tunnel unless testing performance anyway), switch to an older version, compile your own version out of the Github code (the bug is already fixed there), or revert to an older version. One of these should help ease your disgust.

 

[pege63]

Cant overwrite with ASUS FW?

I wanted to flash over Merlins FW with ASUS Original FW, but it proves impossible to flash over merlins FW RT AC68U_3.0.0.4_376.49_5.trx with ASUS RT_AC68U_3.0.0.4.378.3873.trx. Have now tried a dozen times without success, what may seem to go wrong or why it fails ???

 

[RMerlin]

I wanted to flash over Merlins FW with ASUS Original FW, but it proves impossible to flash over merlins FW RT AC68U_3.0.0.4_376.49_5.trx with ASUS RT_AC68U_3.0.0.4.378.3873.trx. Have now tried a dozen times without success, what may seem to go wrong or why it fails ???

You need to first flash either Asus's 376_3626, or my 376.49_6_cfeupd test build first, as all 378_xxxx firmwares require that you run an updated bootloader as well as a firmware with a 64 MB main partition.

BTW, don't hijack threads. This thread is about OpenVPN, which has nothing to do with your question.