Joined: 16 Nov 2015 Posts: 6447 Location: UK, London, just across the river..
Posted: Thu Jun 29, 2023 13:03 Post subject:
hmm i always had a believe both work independently...1.1.1u is working on DDWRT...while if you install
libopenssl to 3.0.8-9 via Entware it serves binaries that require it only on Entware level...at least Stubby and DNScrypt-proxy v2 i believe are using it...while SmartDNS and OpenVPN on router level are using DDWRT binaries for SSL...but thanks anyway...you can report at Entware....too
And yes no more 1.1.1x updates nor Entware will be updating/using it...i guess BS has to consider a replacement...i hope i wont be a mess...
p.s. actually OpenSSL offers paid 1.1.1x support after endoflife ...if im not wrong... _________________ Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
hmm i always had a believe both work independently...1.1.1u is working on DDWRT...while if you install
libopenssl to 3.0.8-9 via Entware it serves binaries that require it only on Entware level...at least Stubby and DNScrypt-proxy v2 i believe are using it...while SmartDNS and OpenVPN on router level are using DDWRT binaries for SSL...
yes, ddwrt libopenssl 1.1 and Entware libopenssl 1.1 and Entware libopenssl 3.0 are able to exist concurrently as you've said, at least for me.
Side note: I've also tried
but vsftpd complained about internal error with libssl.
I dont understand why you linked (ln) and existing and working libssl 1.1.1x to the same in opt i realized v 3x was not happy with vsftpd
can you point vsftpd to use the 1.1.1x instead..either in opt or the current in ddwrt..
sry im not using vsftpd to know more and for me my stuff is ok (with both in separated) use... _________________ Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
but vsftpd complained about internal error with libssl.
I dont understand why you linked (ln) and existing and working libssl 1.1.1x to the same in opt i realized v 3x was not happy with vsftpd
can you point vsftpd to use the 1.1.1x instead..either in opt or the current in ddwrt..
sry im not using vsftpd to know more and for me my stuff is ok (with both in separated) use...
Sorry I wasn't clear.
Last Entware OpenSSL 1.1 is libopenssl 1.1.1s-1: although it's working good with vsftpd 3.0.5-1, it's outdated.
ddwrt libopenssl is 1.1.1.u
I wanted to try if vsftpd could work with ddwrt libopenssl 1.1.1u instead of the outdated 1.1.1s from Entware, so I removed Entware libopenssl 1.1.1s and put the link to ddwrt libopenssl 1.1.1u
but the result was not good (vsftpd complained internal error with libssl)
So I reverted to my original workaround (copied libcrypto.so.1.1 and libssl.so.1.1 from Entware libopenssl 1.1.1s-1 to my /opt/lib), and everything are ok (although outdated)
Probably I just sit and wait if vsftpd author migrates to OpenSSL 3.x, but for now this is the best I can get: vsftpd uses libopenssl 1.1.1s (Entware), ddwrt libopenssl 1.1.1u is for ddwrt, other Entware packages use libopenssl 3.x (Entware)
Joined: 26 Mar 2013 Posts: 1858 Location: Hung Hom, Hong Kong
Posted: Sat Jul 01, 2023 6:22 Post subject:
IONK wrote:
I wanted to try if vsftpd could work with ddwrt libopenssl 1.1.1u instead of the outdated 1.1.1s from Entware, so I removed Entware libopenssl 1.1.1s and put the link to ddwrt libopenssl 1.1.1u
but the result was not good (vsftpd complained internal error with libssl)
Could you post the exact error messages when vsftpd was started? _________________ Router: Asus RT-N18U (rev. A1)
Drink, Blink, Stretch! Live long and prosper! May the Force and farces be with you!
Because Entware vsftpd is compiled against Entware's version of libopenssl... sometimes, these things matter. _________________ "The woods are lovely, dark and deep,
But I have promises to keep,
And miles to go before I sleep,
And miles to go before I sleep." - Robert Frost
"I am one of the noticeable ones - notice me" - Dale Frances McKenzie Bozzio
just to clarify, I didn't request BrainSlayer to update ddwrt's OpenSSL lib. I just share my findings in case others are in similar situations.
dale_gribble39 wrote:
Because Entware vsftpd is compiled against Entware's version of libopenssl... sometimes, these things matter.
I encounter the similar compatibility issue between ddwrt's php8 and Entware's php8 modules. Solution is to use the whole php8 suite from Entware, not mixing php8 components from ddwrt and Entware. I've posted the details somewhere here but I'm too lazy to find the link now.
mwchang wrote:
Could you post the exact error messages when vsftpd was started?
Joined: 08 May 2018 Posts: 14249 Location: Texas, USA
Posted: Wed Aug 02, 2023 19:31 Post subject:
@IONK: I wasn't necessarily referring to you, I was referring to the armchair development team that this community seems to have going on. #sorrynotsorry _________________ "Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT Pogo - A minimal level of ability is expected and needed... DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)
----------------------
Linux User #377467 counter.li.org / linuxcounter.net
English is not my native language, can you please elaborate how on earth giving a feedback / asking a question / or even requesting (politely) in an open forum is "bullying"? _________________ Asus RT-AC88U Donations
Can you please quote the post were I was "asked" to stop asking for updates?
What is wrong with people? How low can you get to ask someone not to ask for updates on a public tech forum?
I bricked my router (check this thread) cause of DD-WRT and I have never complained, and yet some people are annoyed when other users are reporting updates? how low can you be to ask such a thing? _________________ Asus RT-AC88U Donations
Joined: 16 Nov 2015 Posts: 6447 Location: UK, London, just across the river..
Posted: Fri Aug 11, 2023 14:04 Post subject:
Jen1 wrote:
I bricked my router (check this thread) cause of DD-WRT and I have never complained, and yet some people are annoyed when other users are reporting updates? how low can you be to ask such a thing?
i also bricked mines several times couse DDWRT...
But... it is free and its in beta stage, so if it works it works, if not, its on you to safe your ass..and recover your router... _________________ Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913