pixelserv pixelserv - A Better One-pixel Webserver for Adblock

[Svenskmat]

I did the force stop of the app (Android) and I thought it was going to work.. flashs for a second and then sad dog. I did all the Entware update, WL process and update Diversion.. very close.. but not working.. I am trying to get to amazon.ca.. I can turn off Pixelserv and it works. I will follow the again Pixleserv and see if I can see what I am missing and add it in... or leave it the way it is and save some money by not shopping on my phone.. thanks

 

[dave14305]

I did the force stop of the app (Android) and I thought it was going to work.. flashs for a second and then sad dog. I did all the Entware update, WL process and update Diversion.. very close.. but not working.. I am trying to get to amazon.ca.. I can turn off Pixelserv and it works. I will follow the again Pixleserv and see if I can see what I am missing and add it in... or leave it the way it is and save some money by not shopping on my phone.. thanks

What if you clear the app cache or data in Android?

 

[Alfsu]

I did the force stop of the app (Android) and I thought it was going to work.. flashs for a second and then sad dog. I did all the Entware update, WL process and update Diversion.. very close.. but not working.. I am trying to get to amazon.ca.. I can turn off Pixelserv and it works. I will follow the again Pixleserv and see if I can see what I am missing and add it in... or leave it the way it is and save some money by not shopping on my phone.. thanks

Try blocking Google dns servers in the router, that's what worked for me after implementation of the whitelist for Amazon.

Sent from my IN2017 using Tapatalk

 

[Svenskmat]

Try blocking Google dns servers in the router, that's what worked for me after implementation of the whitelist for Amazon.

Sent from my IN2017 using Tapatalk

How do I block Google DNS in the router?
Thanks

 

[Alfsu]

How do I block Google DNS in the router?
Thanks

Create a LAN Route directing google dns servers to the router... Many posts on the subject.

Sent from my IN2017 using Tapatalk

 

[TexasDave]

I am trying to get https to work with my router web UI (RT-AC86U running latest Merlin firmware).

1. pixelserv-tls 2.3.1 is setup and seem to be running fine....
2. I can access 192.168.1.2/ca.crt and see my cert
3. http://192.168.1.2/servstats
4. I try to follow the instructions here but the script gives me the error "Failed to issue a cert to all.dnsomatic.com. You may re-run this script to try again or contact me for assistance." - happens for both
   "router.asus.com" and and "all.dnsomatic.com". "all.dnsomatic.com" shows it is connected in the WebUI.
5. I then tried to follow the instructions here with no luck either.

I have been messing with this for some time and am worried I am in a weird state. Is there an easy way to "clean up" everything and try again?

Other ideas welcome. Thanks!

 

[thelonelycoder]

I am trying to get https to work with my router web UI (RT-AC86U running latest Merlin firmware).

1. pixelserv-tls 2.3.1 is setup and seem to be running fine....
2. I can access 192.168.1.2/ca.crt and see my cert
3. http://192.168.1.2/servstats
4. I try to follow the instructions here but the script gives me the error "Failed to issue a cert to all.dnsomatic.com. You may re-run this script to try again or contact me for assistance." - happens for both
   "router.asus.com" and and "all.dnsomatic.com". "all.dnsomatic.com" shows it is connected in the WebUI.
5. I then tried to follow the instructions here with no luck either.

I have been messing with this for some time and am worried I am in a weird state. Is there an easy way to "clean up" everything and try again?

Other ideas welcome. Thanks!

This function is built into amtm.

 

[dave14305]

I am trying to get https to work with my router web UI (RT-AC86U running latest Merlin firmware).

1. pixelserv-tls 2.3.1 is setup and seem to be running fine....
2. I can access 192.168.1.2/ca.crt and see my cert
3. http://192.168.1.2/servstats
4. I try to follow the instructions here but the script gives me the error "Failed to issue a cert to all.dnsomatic.com. You may re-run this script to try again or contact me for assistance." - happens for both
   "router.asus.com" and and "all.dnsomatic.com". "all.dnsomatic.com" shows it is connected in the WebUI.
5. I then tried to follow the instructions here with no luck either.

I have been messing with this for some time and am worried I am in a weird state. Is there an easy way to "clean up" everything and try again?

Other ideas welcome. Thanks!

Run the script in amtm and only choose the option for router.asus.com. DNS-o-Matic will be problematic since the router doesn’t know your true DDNS name.

 

[TexasDave]

Thank you both! It failed when I ran the "new" script and then the option went away. Reset amtm and ran again with the original script and the script worked. And I now have my padlock.

Note: Padlock only showing on FireFox and it may be because of me messing around before? Does not show for Chrome or MS Edge.

I did mess around quite a bit. If I want to back everything out and start clean, to make sure there is no garbage left (from my poking around), is there a way to do that?

Thanks so much - easy to do but not obvious to run the script inside amtm (at least to me). Keep safe!

 

[TexasDave]

OK - I wanted to start over. Installed Diversion and then uninstalled it as that seems like a pretty good way to "clean up".

Went into amtm - added the Entware repository.

I have done the steps listed here:

https://github.com/kvic-z/pixelserv-tls/wiki/How-to-best-run-pixelserv-tls-on-Asuswrt-Merlin​

Then do I do (using Entware instructions):

https://github.com/kvic-z/pixelserv-tls/wiki/Create-and-Import-the-CA-Certificate​

or do I run the script inside amtm:

https://github.com/kvic-z/pixelserv...ixelserv-CA-to-issue-a-certificate-for-WebGUI
​

I am guessing the above two are the same? It is a bit confusing - at least to me. Thanks!

 

[dave14305]

Then do I do (using Entware instructions):

https://github.com/kvic-z/pixelserv-tls/wiki/Create-and-Import-the-CA-Certificate
or do I run the script inside amtm:

https://github.com/kvic-z/pixelserv...ixelserv-CA-to-issue-a-certificate-for-WebGUI
I am guessing the above two are the same? It is a bit confusing - at least to me. Thanks!

Importing the CA is required for your devices to trust certificates created by Pixelserv. Firefox has a separate cert store than Windows, so you have to do it twice if you use Firefox and Edge/Chrome. So if you’ve done these steps multiple times, you could end up with the wrong CA on your devices depending how much you started over.

Unfortunately you have to take the Pixelserv wiki instructions with a grain of salt because they are aging and the author is AWOL, and amtm makes it simpler. You should really avoid installing Pixelserv manually, and instead just install Diversion and let Diversion install Entware and Pixelserv and create your CA. Once that’s done, run the script in amtm to secure the webui.

 

[TexasDave]

@dave14305 - Thanks!! All sorted now...

"Unfortunately you have to take the Pixelserv wiki instructions with a grain of salt because they are aging and the author is AWOL, and amtm makes it simpler. "​

Yeah - I started there. I think that got me in trouble.

"You should really avoid installing Pixelserv manually, and instead just install Diversion and let Diversion install Entware and Pixelserv and create your CA. Once that’s done, run the script in amtm to secure the webui."​

I did the above. And all is good. Thanks!

 

[sirzur]

I have an RT-AC86U with Merlin installed (Firmware 384.16). I have been having problems with starting pixelserv-tls, trying to restart it. I have uninstalled Diversion Standard and reinstalled it. But I am still unable to start or restart pixelserv-tls. The following lines are from System.log when I try to start pixelserv-tls

May 31 12:44:24 Diversion: created br0ixelserv-tls for 192.168.1.252
May 31 12:44:24 pixelserv-tls[19672]: pixelserv-tls 2.3.1 (compiled: Mar 23 2020 07:23:17 flags: tls1_3) options: 192.168.1.252
May 31 12:44:24 kernel: pixelserv-tls[19672]: unhandled level 3 translation fault (11) at 0x00000008, esr 0x92000007
May 31 12:44:24 kernel: pgd = ffffffc0170af000
May 31 12:44:24 Entware (armv7sf-k2.6): Started pixelserv-tls (Diversion)
May 31 12:44:24 kernel: [00000008] *pgd=0000000012d9c003, *pud=0000000012d9c003, *pmd=0000000019301003, *pte=0000000000000000
May 31 12:44:24 kernel: CPU: 1 PID: 19672 Comm: pixelserv-tls Tainted: P O 4.1.27 #2
May 31 12:44:24 kernel: Hardware name: Broadcom-v8A (DT)
May 31 12:44:24 kernel: task: ffffffc019325500 ti: ffffffc0151ac000 task.ti: ffffffc0151ac000
May 31 12:44:24 kernel: PC is at 0x166d8
May 31 12:44:24 kernel: LR is at 0xf6f12b20
May 31 12:44:24 kernel: pc : [<00000000000166d8>] lr : [<00000000f6f12b20>] pstate: 600a0010
May 31 12:44:24 kernel: sp : 00000000ff87bf58
May 31 12:44:24 kernel: x12: 0000000000000002
May 31 12:44:24 kernel: x11: 00000000ff87c6c4 x10: 00000000f7305000
May 31 12:44:24 kernel: x9 : 0000000000000000 x8 : 0000000000000000
May 31 12:44:24 kernel: x7 : 0000000000000000 x6 : 0000000000012d3c
May 31 12:44:24 kernel: x5 : 0000000000000000 x4 : 000000000001bf70
May 31 12:44:24 kernel: x3 : 0000000000000000 x2 : 0000000000000001
May 31 12:44:24 kernel: x1 : 0000000000000000 x0 : 0000000000000000


Can anyone provide some pointers?

Things I have tried includes rebooting router and clearing NVRAM with this command "for line in `nvram show | grep =$ `; do var=${line%*=}; nvram unset $var; done; nvram commit"

 

[mrchow]

try to uninstall pixelserv-tls via opkg and set it up again with diversion?

 

[sirzur]

I removed pixelserv-tls with "opkg remove pixelserv-tls". Uninstalled diversion from amtm. And reinstalled diversion standard, which includes pixelserv-tls. Restarted, but no joy. Pixelserv-tls still does not re-start. Same "unhandled level 3 translation fault"

 

[dave14305]

I removed pixelserv-tls with "opkg remove pixelserv-tls". Uninstalled diversion from amtm. And reinstalled diversion standard, which includes pixelserv-tls. Restarted, but no joy. Pixelserv-tls still does not re-start. Same "unhandled level 3 translation fault"

Entware shows armv7sf-k2.6 in your log. Not expected architecture for an AC86U, unless you really meant an AC68U.

 

[sirzur]

Entware shows armv7sf-k2.6 in your log. Not expected architecture for an AC86U, unless you really meant an AC68U.

No. I have a AC86U. If that is not the expected architecture, I have no idea how it happened. I used amtm to manage the entware package, including updating and upgrading. Come to think of it, the problem arose after I updated and upgraded the entware package.

How would I be able to ensure that amtm installs the correct architectural package for the AC86U? I thought amtm would be structured enough to be able to pick the right package to install. Would the correct solution be then to uninstall the entware package and then re-install?

 

[sirzur]

@dave14305, thanks for your pointer. I repeated the process of removing pixelserv-tls and diversion again, but this time, I also uninstalled the entware package. The newly installed package of diversion/pixelserv-tls with entware now starts. SO all good now.

 

[gattaca]

Does anyone know why the pixelserv stats are not being updated in the "Addons" tab of Merlin+AMTM? When I access the stats directly from my browser (http://192.168.111.2/servstats), I see current, updating pixelserv stats. Then when viewing off the Addons tab, expanding the "Pixelserv Statistics Report" the WebGUI shows me the same report that's always 6 days old. I updated AMTM and then restarted the router this AM, no change in behavior. Thanks!

 

[dave14305]

Does anyone know why the pixelserv stats are not being updated in the "Tools" tab of Merlin+AMTM? When I directly access the stats directly from the browser (http://192.168.111.2/servstats), I see current, updating stats. When viewing off the tools tab, when I expand the "Pixelserv Statistics Report" it always seems to be the same report that's 6 days old. I restarted the router fully this AM, no change in behavior. Thanks!

Is that a question for the uiDivStats thread?