pixelserv pixelserv - A Better One-pixel Webserver for Adblock

[DonnyJohnny]

very unlikely but anything is possible

Installation will be persistent i.e. sticky. Revert back is possible. ASUSWRT fw version is irrelevant.


To install the new library, take armv7 as example:

$ opkg install http://bin.entware.net/armv7sf-k2.6/test/libopenssl_1.0.2n-1c_armv7-2.6.ipk

Restart pixelserv-tls. That's it.

Replace the URL appropriately for armv8.

Just for record purpose, how do we revert back to stock if need to? What command? I know nothing about this but would want to test it out.

 

[john9527]

@jrmwvu04
I compiled the latest version of my fork porting over the debian openssl patch for OPENSSL_NO_BUF_FREELISTS (I liked their targeted approach). If you want to give it a try,
https://1drv.ms/f/s!Ainhp1nBLzMJmAFmjjskkJjm8Sei

 

[punkinduster]

@punkinduster I got your post in email (not always happen on snbforum system btw..) but could longer find it to respond in the thread... I didn't get chance to test the libraries myself yesterday nor finish preparation for rc.4. Will do it today in 12 hours or so.

Sorry, you couldn't find my post because I deleted it. After reading it again I didn't want to seem impatient and realize it will be available when it is ready and not before. Thanks for all of your hard work!

 

[kvic]

how do we revert back to stock if need to? What command?

opkg --force-reinstall install libopenssl

Thanks for all of your hard work!

How is your memory usage with the new lib?

 

[kvic]

New beta version 2.1.0-rc.4

Thanks for all your efforts and the SERVSTATS in particular. Every piece counts and I read it carefully even though you might not receive a direct reaction. Together we learned a huge problem in OpenSSL and contributed a great fix, not only for us but perhaps all Entware users and maybe more. Consider yourself part of this achievement.

New and changes in rc.4 could be found at usual place kazoo.ga/pixelserv-tls.

Please continue to provide feedback on memory usage as well as other issues.

Interesting timing numbers in pixelserv-tls: #1617
A good test case to conduct for rc.4: #1618

Entware (ARMv7, ARMv8 and mipsel) users could run the one liner below or otherwise to install the test version.

sh -c "$(wget -qO - https://kazoo.ga/pixelserv-tls/install-beta.sh)"

 

[jrmwvu04]

@jrmwvu04
I compiled the latest version of my fork porting over the debian openssl patch for OPENSSL_NO_BUF_FREELISTS (I liked their targeted approach). If you want to give it a try,
https://1drv.ms/f/s!Ainhp1nBLzMJmAFmjjskkJjm8Sei

New beta version 2.1.0-rc.4

Will be up and running in a few moments. Won't have time to test much today but it'll get a workout all the same.

 

[kvic]

OpenSSL test libraries from Entware.

You'll have to manually install the test library (intructions below).

Then, restart pixelserv-tls through command line (recommended) to take effect:

/opt/etc/init.d/S80pixelserv-tls restart

If you suspect running into any weird issues in other Entware applications, then pls do a reboot. Otherwise, not mandatory.

Installation - ARMv7

opkg install http://bin.entware.net/armv7sf-k2.6/test/libopenssl_1.0.2n-1c_armv7-2.6.ipk

Installation - ARMv8 64-bit

opkg install http://bin.entware.net/aarch64-k3.10/test/libopenssl_1.0.2n-1c_aarch64-3.10.ipk

Or, downgrade from a higher version to this version - ARMv7

wget -P /tmp http://bin.entware.net/armv7sf-k2.6/test/libopenssl_1.0.2n-1c_armv7-2.6.ipk
opkg --force-downgrade install /tmp/libopenssl_1.0.2n-1c_armv7-2.6.ipk
rm /tmp/libopenssl_1.0.2n-1c_armv7-2.6.ipk

Or, downgrade from a higher version to this version - ARMv8 64-bit

wget -P /tmp http://bin.entware.net/aarch64-k3.10/test/libopenssl_1.0.2n-1c_aarch64-3.10.ipk
opkg --force-downgrade install /tmp/libopenssl_1.0.2n-1c_aarch64-3.10.ipk
rm /tmp/libopenssl_1.0.2n-1c_aarch64-3.10.ipk

Revert back to latest stock Entware - ARMv7 & ARMv8

opkg --force-reinstall install libopenssl

We shall thank @zyxmon (and @ryzhov_al) to provide the test libraries, and listen to feedback from us all.

EDIT (2018-7-4):

update for downgrade from a higher version to v1.0.2n-1c

 

[jrmwvu04]

We shall thank @zyxmon (and @ryzhov_al) to provide the test libraries, and listen to feedback from us all.

I have loaded this test library as well.

 

[penguin22]

OpenSSL test libraries from Entware.

Installation - ARMv7

opkg install http://bin.entware.net/armv7sf-k2.6/test/libopenssl_1.0.2n-1c_armv7-2.6.ipk

Installation - ARMv8 64-bit

opkg install http://bin.entware.net/aarch64-k3.10/test/openssl-util_1.0.2n-1c_aarch64-3.10.ipk

Revert back to stock Entware - ARMv7 & ARMv8

opkg --force-reinstall install libopenssl

We shall thank @zyxmon (and @ryzhov_al) to provide the test libraries, and listen to feedback from us all.

Loaded Pixelserv 2.1.0-rc4 on ARMv8 and functioning fine; is is also necessary to load the OpenSSL test libraries or is that already included in the rc4 update?

 

[Asad Ali]

Loaded Pixelserv 2.1.0-rc4 on ARMv8 and functioning fine; is is also necessary to load the OpenSSL test libraries or is that already included in the rc4 update?

You need to update test library separately.

 

[kvic]

is is also necessary to load the OpenSSL test libraries

Test library is a separate installation not handled by the one-liner beta installer. I've updated the instructions in the above post. Thanks for raising the question.

 

[penguin22]

Test library is a separate installation not handled by the one-liner beta installer. I've updated the instructions in the above post. Thanks for raising the question.

Thanks for clarifying. OpenSSL test libraries updates and (with less than 5 minutes of run-time) at 1.1% mem.

 

[Butterfly Bones]

grrrr

 

[Butterfly Bones]

grrr

 

[Butterfly Bones]

well I'm blocked crap

 

[kvic]

well I'm blocked crap

Perhaps use pastebin.com next time..

If those cert files actually exist, then to fix:

chown -R nobody /opt/var/cache/pixelserv

 

[Asad Ali]

@kvic or @everyone Have you guys found any way to import the root certificate on Android WITHOUT setting up a password first and without rooting because in my house there are few old age Android users who don't want to set up any password on their devices and it messed up my stats

 

[Butterfly Bones]

Perhaps use pastebin.com next time..

If those cert files actually exist, then to fix:

chown -R nobody /opt/var/cache/pixelserv

Owner nobody was set and working fine as you can see in the complete post on pastebin.
https://pastebin.com/Qm8C6Gr4

 

[DonnyJohnny]

@kvic or @everyone Have you guys found any way to import the root certificate on Android WITHOUT setting up a password first and without rooting because in my house there are few old age Android users who don't want to set up any password on their devices and it messed up my stats

What are you talking about? Just use the client browser and go
YourPixelservIP/ca.crt . Eg 192.168.1.3/ca.crt
Add it as your trusted CA. As simple as ABC.

 

[kvic]

Owner nobody was set and working fine as you can see in the complete post on pastebin.
https://pastebin.com/Qm8C6Gr4

If you run the above command line, it should work now...give it a try. I suspect not the files but the directory itself lost permission to 'nobody'.

edit:

@thelonelycoder Perhaps worth double check if AB-S is overriding the directory from time to time..