May 17, 2012 4:17 AM

Same TLS error in r19260. Back to r18730.

May 18, 2012 5:04 AM

debiansid said:

wabe said:

debiansid said:

wabe said:

debiansid said: I was wondering is it possible to install DLNA version and use ipkg openvpn instead of current one, will it work?

Absolutely! I have run OpenVPN in this way for years using an Optware script to setup the configuration. Just shut off OpenVPN in the GUI, no need to change build unless you need DLNA. You need "OTRW" and external storage though.

I just tried to run openvpn from optware on build 18730 vpn version, but it complained openssl cannot support sha256, so I had to switch back to default openvpn binary. "Wed May 16 22:57:53 2012 us=577120 Message hash algorithm 'sha256' not found (OpenSSL)

I currently run 18730 kingkong build with this setup, works perfectly. I'm actually posting this message through an OpenVPN connection to my router

Which openvpn binary your running? Opware's or from firmware. Thanks.

I run Optware's version

May 18, 2012 10:21 AM

debiansid said: ipkg install openvpn then /opt/sbin/openvpn --config /opt/etc/openvpn/openvpn.conf --daemon I did exactly as you, but log shows Wed May 16 22:57:53 2012 us=577120 Message hash algorithm 'sha256' not found (OpenSSL) are you using sha1 instead of sha256?

No reference to either in my setup. Don't know what is the default setting. Are you sure the rest of your config is correct on both server and client side?

May 21, 2012 10:50 AM

debiansid said:

wabe said:

debiansid said: ipkg install openvpn then /opt/sbin/openvpn --config /opt/etc/openvpn/openvpn.conf --daemon I did exactly as you, but log shows Wed May 16 22:57:53 2012 us=577120 Message hash algorithm 'sha256' not found (OpenSSL) are you using sha1 instead of sha256?

No reference to either in my setup. Don't know what is the default setting. Are you sure the rest of your config is correct on both server and client side?

This is my openvpn.conf on DD-wrt as client of Linux OpenVPN Server.openssl on DD-wrt is 0.9.7m which not support sha256. mtu-disc yes dev tun0 proto udp cipher AES-256-CBC auth sha256 remote x.x.x.x 2010 tls-client tun-mtu 1500 comp-lzo no fast-io ping 10 tls-auth /opt/etc/openvpn/ta.key 1 ping-restart 60 script-security 3 system log /tmp/openvpn.log

openssl dgst ---help
unknown option '---help'
options are
-c              to output the digest with separating colons
-d              to output debug info
-hex            output as hex dump
-binary         output in binary form
-sign   file    sign digest using private key in file
-verify file    verify a signature using public key in file
-prverify file  verify a signature using private key in file
-keyform arg    key file format (PEM or ENGINE)
-signature file signature to verify
-binary         output in binary form
-engine e       use engine e, possibly a hardware device.
-md5 to use the md5 message digest algorithm (default)
-md4 to use the md4 message digest algorithm
-md2 to use the md2 message digest algorithm
-sha1 to use the sha1 message digest algorithm
-sha to use the sha message digest algorithm
-mdc2 to use the mdc2 message digest algorithm
-ripemd160 to use the ripemd160 message digest algorithm