pixelserv pixelserv - A Better One-pixel Webserver for Adblock

Svenskmat

Regular Contributor
Ok...I've updated the list and sorted/processed the new list. I also enabled pixelserv and tried using the Amazon app. Initially, the app opened but I quickly saw the sad "dog" image and the message "app can't be used". I went back and processed the list again, restarted Diversion (and forced updated as well) and I also updated the entware packages (don't think this was required). Didn't tell my wife anything and she was using the app earlier with no complaints....wow...so far so good !!!! Really appreciated this...so Amazon app working with pixelserv-tls enabled at this time! I'll continue to monitor...
I did everything you did (except I told my wife) with pixelserv and I cannot get the Amazon app to work other then the sad dog. Any other ideas.
 

Kingp1n

Very Senior Member
I did everything you did (except I told my wife) with pixelserv and I cannot get the Amazon app to work other then the sad dog. Any other ideas.
So, you have whitelisted all the recommended domains correct? Try re-processing the new WL and force update Diversion. I also, updated the Entware packages but I doubt it was unnecessary!

I had the 'sad' dog image showed once after doing this but it disappeared after I forced close the amazon app. It's working again for me but maybe someone else can recommend additional input.

You might have to double check all your domains to ensure you have whitelisted than correctly! For a couple of them it did advise that I already had them thru Skynet or something to do with Skynet and I still added them to WL.
 

Svenskmat

Regular Contributor
I did the force stop of the app (Android) and I thought it was going to work.. flashs for a second and then sad dog. I did all the Entware update, WL process and update Diversion.. very close.. but not working.. I am trying to get to amazon.ca.. I can turn off Pixelserv and it works. I will follow the again Pixleserv and see if I can see what I am missing and add it in... or leave it the way it is and save some money by not shopping on my phone.. thanks
 

dave14305

Part of the Furniture
I did the force stop of the app (Android) and I thought it was going to work.. flashs for a second and then sad dog. I did all the Entware update, WL process and update Diversion.. very close.. but not working.. I am trying to get to amazon.ca.. I can turn off Pixelserv and it works. I will follow the again Pixleserv and see if I can see what I am missing and add it in... or leave it the way it is and save some money by not shopping on my phone.. thanks
What if you clear the app cache or data in Android?
 

Alfsu

Regular Contributor
I did the force stop of the app (Android) and I thought it was going to work.. flashs for a second and then sad dog. I did all the Entware update, WL process and update Diversion.. very close.. but not working.. I am trying to get to amazon.ca.. I can turn off Pixelserv and it works. I will follow the again Pixleserv and see if I can see what I am missing and add it in... or leave it the way it is and save some money by not shopping on my phone.. thanks
Try blocking Google dns servers in the router, that's what worked for me after implementation of the whitelist for Amazon.

Sent from my IN2017 using Tapatalk
 

Svenskmat

Regular Contributor
Try blocking Google dns servers in the router, that's what worked for me after implementation of the whitelist for Amazon.

Sent from my IN2017 using Tapatalk
How do I block Google DNS in the router?
Thanks
 

TexasDave

Occasional Visitor
I am trying to get https to work with my router web UI (RT-AC86U running latest Merlin firmware).
  1. pixelserv-tls 2.3.1 is setup and seem to be running fine....
  2. I can access 192.168.1.2/ca.crt and see my cert
  3. http://192.168.1.2/servstats
  4. I try to follow the instructions here but the script gives me the error "Failed to issue a cert to all.dnsomatic.com. You may re-run this script to try again or contact me for assistance." - happens for both
    "router.asus.com" and and "all.dnsomatic.com". "all.dnsomatic.com" shows it is connected in the WebUI.
  5. I then tried to follow the instructions here with no luck either.
I have been messing with this for some time and am worried I am in a weird state. Is there an easy way to "clean up" everything and try again?

Other ideas welcome. Thanks!
 
Last edited:

thelonelycoder

Part of the Furniture
I am trying to get https to work with my router web UI (RT-AC86U running latest Merlin firmware).
  1. pixelserv-tls 2.3.1 is setup and seem to be running fine....
  2. I can access 192.168.1.2/ca.crt and see my cert
  3. http://192.168.1.2/servstats
  4. I try to follow the instructions here but the script gives me the error "Failed to issue a cert to all.dnsomatic.com. You may re-run this script to try again or contact me for assistance." - happens for both
    "router.asus.com" and and "all.dnsomatic.com". "all.dnsomatic.com" shows it is connected in the WebUI.
  5. I then tried to follow the instructions here with no luck either.
I have been messing with this for some time and am worried I am in a weird state. Is there an easy way to "clean up" everything and try again?

Other ideas welcome. Thanks!

This function is built into amtm.
 

dave14305

Part of the Furniture
I am trying to get https to work with my router web UI (RT-AC86U running latest Merlin firmware).
  1. pixelserv-tls 2.3.1 is setup and seem to be running fine....
  2. I can access 192.168.1.2/ca.crt and see my cert
  3. http://192.168.1.2/servstats
  4. I try to follow the instructions here but the script gives me the error "Failed to issue a cert to all.dnsomatic.com. You may re-run this script to try again or contact me for assistance." - happens for both
    "router.asus.com" and and "all.dnsomatic.com". "all.dnsomatic.com" shows it is connected in the WebUI.
  5. I then tried to follow the instructions here with no luck either.
I have been messing with this for some time and am worried I am in a weird state. Is there an easy way to "clean up" everything and try again?

Other ideas welcome. Thanks!
Run the script in amtm and only choose the option for router.asus.com. DNS-o-Matic will be problematic since the router doesn’t know your true DDNS name.
 

TexasDave

Occasional Visitor
Thank you both! It failed when I ran the "new" script and then the option went away. Reset amtm and ran again with the original script and the script worked. And I now have my padlock.

Note: Padlock only showing on FireFox and it may be because of me messing around before? Does not show for Chrome or MS Edge.

I did mess around quite a bit. If I want to back everything out and start clean, to make sure there is no garbage left (from my poking around), is there a way to do that?

Thanks so much - easy to do but not obvious to run the script inside amtm (at least to me). Keep safe!
 
Last edited:

TexasDave

Occasional Visitor
OK - I wanted to start over. Installed Diversion and then uninstalled it as that seems like a pretty good way to "clean up".

Went into amtm - added the Entware repository.

I have done the steps listed here:


Then do I do (using Entware instructions):


or do I run the script inside amtm:

I am guessing the above two are the same? It is a bit confusing - at least to me. Thanks!
 

dave14305

Part of the Furniture
Then do I do (using Entware instructions):

https://github.com/kvic-z/pixelserv-tls/wiki/Create-and-Import-the-CA-Certificate
or do I run the script inside amtm:

https://github.com/kvic-z/pixelserv...ixelserv-CA-to-issue-a-certificate-for-WebGUI
I am guessing the above two are the same? It is a bit confusing - at least to me. Thanks!
Importing the CA is required for your devices to trust certificates created by Pixelserv. Firefox has a separate cert store than Windows, so you have to do it twice if you use Firefox and Edge/Chrome. So if you’ve done these steps multiple times, you could end up with the wrong CA on your devices depending how much you started over.

Unfortunately you have to take the Pixelserv wiki instructions with a grain of salt because they are aging and the author is AWOL, and amtm makes it simpler. You should really avoid installing Pixelserv manually, and instead just install Diversion and let Diversion install Entware and Pixelserv and create your CA. Once that’s done, run the script in amtm to secure the webui.
 

TexasDave

Occasional Visitor
@dave14305 - Thanks!! All sorted now...

"Unfortunately you have to take the Pixelserv wiki instructions with a grain of salt because they are aging and the author is AWOL, and amtm makes it simpler. "

Yeah - I started there. I think that got me in trouble.

"You should really avoid installing Pixelserv manually, and instead just install Diversion and let Diversion install Entware and Pixelserv and create your CA. Once that’s done, run the script in amtm to secure the webui."

I did the above. And all is good. Thanks!
 

sirzur

Occasional Visitor
I have an RT-AC86U with Merlin installed (Firmware 384.16). I have been having problems with starting pixelserv-tls, trying to restart it. I have uninstalled Diversion Standard and reinstalled it. But I am still unable to start or restart pixelserv-tls. The following lines are from System.log when I try to start pixelserv-tls

May 31 12:44:24 Diversion: created br0:pixelserv-tls for 192.168.1.252
May 31 12:44:24 pixelserv-tls[19672]: pixelserv-tls 2.3.1 (compiled: Mar 23 2020 07:23:17 flags: tls1_3) options: 192.168.1.252
May 31 12:44:24 kernel: pixelserv-tls[19672]: unhandled level 3 translation fault (11) at 0x00000008, esr 0x92000007
May 31 12:44:24 kernel: pgd = ffffffc0170af000
May 31 12:44:24 Entware (armv7sf-k2.6): Started pixelserv-tls (Diversion)
May 31 12:44:24 kernel: [00000008] *pgd=0000000012d9c003, *pud=0000000012d9c003, *pmd=0000000019301003, *pte=0000000000000000
May 31 12:44:24 kernel: CPU: 1 PID: 19672 Comm: pixelserv-tls Tainted: P O 4.1.27 #2
May 31 12:44:24 kernel: Hardware name: Broadcom-v8A (DT)
May 31 12:44:24 kernel: task: ffffffc019325500 ti: ffffffc0151ac000 task.ti: ffffffc0151ac000
May 31 12:44:24 kernel: PC is at 0x166d8
May 31 12:44:24 kernel: LR is at 0xf6f12b20
May 31 12:44:24 kernel: pc : [<00000000000166d8>] lr : [<00000000f6f12b20>] pstate: 600a0010
May 31 12:44:24 kernel: sp : 00000000ff87bf58
May 31 12:44:24 kernel: x12: 0000000000000002
May 31 12:44:24 kernel: x11: 00000000ff87c6c4 x10: 00000000f7305000
May 31 12:44:24 kernel: x9 : 0000000000000000 x8 : 0000000000000000
May 31 12:44:24 kernel: x7 : 0000000000000000 x6 : 0000000000012d3c
May 31 12:44:24 kernel: x5 : 0000000000000000 x4 : 000000000001bf70
May 31 12:44:24 kernel: x3 : 0000000000000000 x2 : 0000000000000001
May 31 12:44:24 kernel: x1 : 0000000000000000 x0 : 0000000000000000


Can anyone provide some pointers?

Things I have tried includes rebooting router and clearing NVRAM with this command "for line in `nvram show | grep =$ `; do var=${line%*=}; nvram unset $var; done; nvram commit"
 
Last edited:

sirzur

Occasional Visitor
I removed pixelserv-tls with "opkg remove pixelserv-tls". Uninstalled diversion from amtm. And reinstalled diversion standard, which includes pixelserv-tls. Restarted, but no joy. Pixelserv-tls still does not re-start. Same "unhandled level 3 translation fault"
 

dave14305

Part of the Furniture
I removed pixelserv-tls with "opkg remove pixelserv-tls". Uninstalled diversion from amtm. And reinstalled diversion standard, which includes pixelserv-tls. Restarted, but no joy. Pixelserv-tls still does not re-start. Same "unhandled level 3 translation fault"
Entware shows armv7sf-k2.6 in your log. Not expected architecture for an AC86U, unless you really meant an AC68U.
 

sirzur

Occasional Visitor
Entware shows armv7sf-k2.6 in your log. Not expected architecture for an AC86U, unless you really meant an AC68U.

No. I have a AC86U. If that is not the expected architecture, I have no idea how it happened. I used amtm to manage the entware package, including updating and upgrading. Come to think of it, the problem arose after I updated and upgraded the entware package.

How would I be able to ensure that amtm installs the correct architectural package for the AC86U? I thought amtm would be structured enough to be able to pick the right package to install. Would the correct solution be then to uninstall the entware package and then re-install?
 

sirzur

Occasional Visitor
@dave14305, thanks for your pointer. I repeated the process of removing pixelserv-tls and diversion again, but this time, I also uninstalled the entware package. The newly installed package of diversion/pixelserv-tls with entware now starts. SO all good now.
 

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top