1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Dismiss Notice

Welcome To SNBForums

SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.

If you'd like to post a question, simply register and have at it!

While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!

[Fork] Asuswrt-Merlin 374.43 LTS releases (V44E4)

Discussion in 'Asuswrt-Merlin' started by john9527, Aug 14, 2014.

  1. john9527

    john9527 Part of the Furniture

    Joined:
    Mar 28, 2014
    Messages:
    6,269
    Location:
    United States
    Yes....that's what it means. Will be created auto-magically for you (as part of the internal firewall setup. It won't be visible in the port forwarding settings)....
     
  2. phx28777

    phx28777 Occasional Visitor

    Joined:
    Dec 2, 2017
    Messages:
    33
    Welcome back John, you have been missed!

    42E7 stress test working well on RT-AC68
    DoT seems a little snappier than 41EA with Cloudflare


    [​IMG]
     
    mark76 likes this.
  3. sto

    sto Occasional Visitor

    Joined:
    Apr 13, 2013
    Messages:
    24
    Location:
    Canada
    w00t!!
     
  4. MysticGold04

    MysticGold04 Occasional Visitor

    Joined:
    Jan 6, 2018
    Messages:
    41
    Location:
    Troubleshooting
    @john9527 42E7 working great here as well. Welcome back and thank you for all of your hard work!
     
    mark76 likes this.
  5. L&LD

    L&LD Part of the Furniture

    Joined:
    Dec 9, 2013
    Messages:
    12,605
    I had to call back a customer today that was using an RT-AC56U in Bridge Mode with the development build 42D5 for another issue and mentioned this great news for their router. They barely hesitated to ask me to upgrade it to 42E7 for them.

    Over OpenVPN (social distancing, of course), the upgrade went without a hitch. That was almost 6 hours ago now, no issues.

    Great job @john9527!
     
    il2, mark76 and john9527 like this.
  6. dave14305

    dave14305 Part of the Furniture

    Joined:
    May 19, 2018
    Messages:
    2,939
    Location:
    USA
    I’m having an issue connecting to my router GUI with https. First with a Pixelserv-generated cert and also with a router self-signed cert. But it’s only an issue connecting from iPadOS 13.4 with Safari. Connecting from Firefox on Windows 10 seems fine.

    httpd will hang and watchdog will restart it during the connection attempt. I’m wondering if anyone else sees this behavior? It could be an iOS thing, or it could be something about https with OpenSSL 1.1. Not sure since it works on Windows.
    Code:
    Mar 28 22:20:37 watchdog: restart httpd - SSL, error detected or process not responding (28)
    Mar 28 22:20:37 rc_service: watchdog 1070:notify_rc stop_httpd
    Mar 28 22:20:37 rc_service: watchdog 1070:notify_rc start_httpd
    Mar 28 22:20:37 rc_service: waiting "stop_httpd" via watchdog ...
    Mar 28 22:20:37 custom_script: Running /jffs/scripts/service-event (args: stop httpd)
    Mar 28 22:20:37 custom_script: Running /jffs/scripts/service-event-end (args: stop httpd)
    Mar 28 22:20:38 custom_script: Running /jffs/scripts/service-event (args: start httpd)
    Mar 28 22:20:38 httpd: start httpd
    Mar 28 22:20:38 httpd: start httpd - SSL
    Mar 28 22:20:38 custom_script: Running /jffs/scripts/service-event-end (args: start httpd)
    
     
  7. ColinTaylor

    ColinTaylor Part of the Furniture

    Joined:
    Mar 31, 2014
    Messages:
    11,663
    Location:
    UK
    Does /etc/cert.pem exist?
     
  8. dave14305

    dave14305 Part of the Furniture

    Joined:
    May 19, 2018
    Messages:
    2,939
    Location:
    USA
    Yes, cert and key.pem exist, and I can login fine the first time. I’ve copied my cer files to /jffs/https and they persist just fine when restarting httpd. If I logout and try to connect again, it hangs and watchdog kicks in. Never seen this before. I’m suspicious of iOS, but not much I can do about it. I’ll try Firefox on iOS in a bit. I do reassign the https port to 443 after changing AiCloud to 7443.

    I’ll keep at it trying to narrow down.
     
  9. dave14305

    dave14305 Part of the Furniture

    Joined:
    May 19, 2018
    Messages:
    2,939
    Location:
    USA
    So this is a split screen of logging in and a watch of netstat -npt. I note the Recv-Q, which persisted over the 2 second interval.

    59EA5507-D226-49D5-91F1-7DE46C6AED83.png
     
  10. ColinTaylor

    ColinTaylor Part of the Furniture

    Joined:
    Mar 31, 2014
    Messages:
    11,663
    Location:
    UK
    No idea. The message seems to come from here after issuing this sort of command:
    Code:
    /usr/sbin/curl --silent --connect-timeout 10 --head --user-agent asusrouter-asuswrt-curl --referer https://192.168.1.1:8443 --insecure https://192.168.1.1:8443
     
  11. airman98

    airman98 New Around Here

    Joined:
    Jun 29, 2018
    Messages:
    3
    John - just had to pop in to say THANK YOU! Great to see you back.

    Your work is truly appreciated by so many of us.

    Hope you are doing well, wishing you the best. Cheers!
     
    mark76, L&LD and dave14305 like this.
  12. dave14305

    dave14305 Part of the Furniture

    Joined:
    May 19, 2018
    Messages:
    2,939
    Location:
    USA
    Firefox on iPad will not reproduce the issue. So I’ll keep looking at Safari. Now what has Apple done? :confused:
     
  13. dave14305

    dave14305 Part of the Furniture

    Joined:
    May 19, 2018
    Messages:
    2,939
    Location:
    USA
    It only happens if I keep Safari’s “Prevent Cross-Site Tracking” enabled. That feature was enhanced in 13.4 to block all third party cookies. Not sure how that is affecting the router. Will think about it in the morning... o_O
     
    L&LD likes this.
  14. john9527

    john9527 Part of the Furniture

    Joined:
    Mar 28, 2014
    Messages:
    6,269
    Location:
    United States
    @dave14305
    The watchdog code tries to talk to the httpd server code to make sure the server is still alive and if it can't, tries to restart the server. The (28) at the end of the line is the curl error code....in this case the command timed out after 10sec.
    First thought is I'm not sure how the browser would be able to interfere.

    Did you somehow remove the other Safari change you debugged?
    https://www.snbforums.com/threads/f...lts-releases-v42e7.18914/page-450#post-464359
    Maybe somehow if Safari automatically gets logged off, it's hanging the server trying to post the logoff msg???
     
    Last edited: Mar 28, 2020
  15. dave14305

    dave14305 Part of the Furniture

    Joined:
    May 19, 2018
    Messages:
    2,939
    Location:
    USA
    I do still have my disc timeout set. But there is no idling necessary to create the issue. But I’m embarrassed to admit that I think it is now somehow solved by nuking all saved data in Safari after switching back from Merlin. I didn’t want to nuke all sites, but there was nothing else for my home.lan domain. I will test more in the morning to see if I can get it to hang again. So far I’m good since nuking Safari.
     
  16. Markmaster

    Markmaster Regular Contributor

    Joined:
    Jun 21, 2014
    Messages:
    76
    Many thanks to you, man!
    @john9527 @RMerlin can you please tell me, how this is realized in Asus firmware? Is that exactly what I'm asking about?
     
  17. thelonelycoder

    thelonelycoder Part of the Furniture

    Joined:
    Jan 23, 2014
    Messages:
    6,808
    Location:
    Switzerland
    Glad you're back @john9527 . We missed you.
     
    sbailey4, L&LD and dave14305 like this.
  18. ColinTaylor

    ColinTaylor Part of the Furniture

    Joined:
    Mar 31, 2014
    Messages:
    11,663
    Location:
    UK
    This has nothing to do with your problem.
     
  19. De Molen

    De Molen New Around Here

    Joined:
    Mar 1, 2019
    Messages:
    2
    Location:
    Apeldoorn, The Netherlands
    John, so good to see you back !

    Thanks for all you work
     
    L&LD likes this.
  20. Marin

    Marin Very Senior Member

    Joined:
    Sep 15, 2015
    Messages:
    930
    Very happy you are back @john9527!


    Sent from my iPhone using Tapatalk
     
    L&LD likes this.