thelonelycoder
Part of the Furniture
The option to clear the cached certs is built into Diversion in ep.So I figured I'd clear the cached certs (preserving my generated certs) and restart. That fixed it. My tav is back to ~50 ms.
The option to clear the cached certs is built into Diversion in ep.So I figured I'd clear the cached certs (preserving my generated certs) and restart. That fixed it. My tav is back to ~50 ms.
Thank you, over the river neighbour! Yes, yes it was...I stand corrected.The beta available through amtm was removed because it was promoted to the release channel on Entware, so no need for the special beta install anymore. Could that be what you’re thinking of?
The option to clear the cached certs is built into Diversion in ep.
I would recommend it so that when Pixelserv blocks your https ads, your browsers don’t waste time trying to evaluate an untrusted certificate it is also sending you. Browsers are getting more finicky about https so better to do it once and forget about it.does pixelserv certificate need to be installed on all devices? If I have no plans on using the webgui with port 8443, do I need to install on those devices?
thank you!I would recommend it so that when Pixelserv blocks your https ads, your browsers don’t waste time trying to evaluate an untrusted certificate it is also sending you. Browsers are getting more finicky about https so better to do it once and forget about it.
The GUI cert is just a bonus use, not the primary purpose.
trick question, is there away to generate a Pixelserv cert and key with a custom sans listed in it?
echo -n "custom SAN url you want" > /tmp/pixelcerts
thanks for your response for this it helped out a lot.Code:echo -n "custom SAN url you want" > /tmp/pixelcerts
Find the certificate file inside /opt/var/cache/pixelserv
Use a text editor to split the file from Step 2.
extract (including BEGIN/END lines) and save as cert.pem
-----BEGIN CERTIFICATE-----
[snipped]
-----END CERTIFICATE-----
extract (including BEGIN/END lines) and save as key.pem
-----BEGIN PRIVATE KEY-----
[snipped]
-----END PRIVATE KEY-----
Looking at the pixelserv-tls servstats in my browser, I see:I just read that the latest version of PixelServ is pixelserv-tls 2.2.1 (compiled: Mar 22 2019). However when I installed Diversion about 2 months ago it installed PixelServ 2.2.1 (compiled Mar 20 2019). Is there a difference between the March 20th and March 22 2019 version of PixelServ?
attached is my image of PixelServ stats.
If so what would be a good way to update to the latest?
Thanks!
In Diversion: ep and 6 there you have the options for Pixelserv-tls and entware upgradesI just read that the latest version of PixelServ is pixelserv-tls 2.2.1 (compiled: Mar 22 2019). However when I installed Diversion about 2 months ago it installed PixelServ 2.2.1 (compiled Mar 20 2019). Is there a difference between the March 20th and March 22 2019 version of PixelServ?
attached is my image of PixelServ stats.
If so what would be a good way to update to the latest?
Thanks!
I recommend posting this in the Diversion thread proper.I am using Diversion Lite because when I use the Diversion Standard installation, some commercial websites do not work (example is Amazon Shopping app on Android). I've searched the forums and haven't found any clear answers on if this is resolvable; I would definitely like to give pixelserv-tls another shot, but not if commercial websites are causing issues. I am intimately familiar with white-listing domains, and have gone down that path to no avail. I'm wondering if the issue is truly one of white-listing? I've tailed the log live, and nothing indicates that any domains are being blocked when the infamous "oops, there's something wrong in our side" message appears. Don't get me wrong, Diversion Lite with some minor tweaks and SkyNet are fantastic; my network is amazing.
Is anyone aware of a workaround? Searching the forums leads to dead-ends.
Is it simply par for the course that some of the big guys (Amazon, Google, etc) are just going to have issues when running a pixelserv-tls server?
I am relatively new to Diversion, but not new to DNS sinkholing and troubleshooting. Any thoughts? Maybe I am just expecting it to work out of the box and perhaps there is something additional I should be doing (albeit I would prefer to not install certificates across the 30 devices on this network).
Done, and thanks:I recommend posting this in the Diversion thread proper.
I haven't seen any updates on the status since March on the pixelserv-tls openwrt forum site. I use a gl*inet travel router with OpenWRT when I am on the road and am also interested.Hey everyone, do you use OpenWRT? I've seen pixelserv-tls is compatible. Is the package located in the repo? Can you give me some pointers?
Sent from my PH-1 using Tapatalk
Thread starter | Title | Forum | Replies | Date |
---|---|---|---|---|
C | Diversion Pixelserv replacement | Asuswrt-Merlin AddOns | 2 | |
L | Is Diversion better than NextDNS, PiHole or AdGuard Home? | Asuswrt-Merlin AddOns | 10 |
Welcome To SNBForums
SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.
If you'd like to post a question, simply register and have at it!
While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!