Openvpn static key configuration gone

[Mistermoonlight]

I was running an old merlin firmware (270.26) version and when i updated to version 50 beta 1, i have seen that the openvpn static key configuration is now gone in the gui. In the advance openvpn section, we can configure all keys, but not a static key anymore (it was there in older firmware). The problem is that i wanted to reuse the same exact openvpn setup with all exact same keys that i had. While i could not figure out in what linux file to change the key, i used the nvram backup tool (from another user's in the forum) to backup all the nvram settings and edit the openvpn static key that was in the backup, then i restored only the openvpn section to the nvram and this is the workaround i got back the previous openvpn static key i was using.

 

[RMerlin]

Set authentication to "Static Key" if you want to use a static key for authentication.

 

[octopus]

Set authentication to "Static Key" if you want to use a static key for authentication.

RMerlin isn't static key used if you run TUN server?
"Extra HMAC authorization" "Incoming 0"
I use it here togheter with CA, DH, CERT and KEY?
Static Key -- Use a pre-shared static key

Octopus

 

[RMerlin]

RMerlin isn't static key used if you run TUN server?
"Extra HMAC authorization" "Incoming 0"
I use it here togheter with CA, DH, CERT and KEY?
Static Key -- Use a pre-shared static key

Octopus

Looks like it's used by both methods, but Asus only took into account the Secret authentication method when they decided to split the static key to a separate page. I'll have to revert that portion of the UI to my original code I guess, thanks.

        sprintf(&buffer[0], "vpn_server%d_hmac", serverNum);
        if ( cryptMode == SECRET || (cryptMode == TLS && nvram_get_int(&buffer[0]) >= 0) )

For now, you can switch to Static Key, enter the key, then switch back to TLS.

 

[Mistermoonlight]

Rmerlin:

Set authentication to "Static Key" if you want to use a static key for authentication.
Reply With Quote

Octopus:

RMerlin isn't static key used if you run TUN server?
"Extra HMAC authorization" "Incoming 0"

Yes i am using similar setting as Octopus:
TUN, TLS, EXtra HMAC authorization Incoming(0). This needs a static key that could not been configured in the new "Content modification of Keys & Certification." menu (while it was there in original RMerlin openvpn gui).

 

[RMerlin]

I already modified the OpenVPN Server page to move the Static Key to the same panel that contains all other cert/keys. This will be included in the final 378.50 release.