RT-AC87U - 384.13_10 : Use openvpn-openssl 2.5.4-1 from entware possible?

[Matteo Guglielmi]

Dear forum,

despite the router not being supported anymore by merlin's fw, I would need to update the version of my openvpn server.

I noticed that I could install openvpn 2.5.X from entware:

admin@BRTO3:/tmp/home/root# opkg list openvpn-openssl
openvpn-openssl - 2.5.4-1 - Open source VPN solution using OpenSSL

and that openvpn seems to be started using a simple symbolic link which currently points to merlin's openvpn:

admin@BRTO3:/tmp/home/root# ps | grep openvpn
  784 admin     5592 S    /etc/openvpn/vpnserver1 --cd /etc/openvpn/server1 --config config.ovpn
  786 admin     5244 S    /etc/openvpn/vpnserver1 --cd /etc/openvpn/server1 --config config.ovpn
 2803 admin     4728 R    grep openvpn
admin@BRTO3:/tmp/home/root# ll /etc/openvpn/vpnserver1
lrwxrwxrwx    1 admin    root            17 Mar 28 03:02 /etc/openvpn/vpnserver1 -> /usr/sbin/openvpn*

Is there a way to update such link so that it will point to entware's openvpn binary?

Thank you.

 

[ColinTaylor]

You could try creating a /jffs/scripts/openvpnserver1.postconf file as follows:

#!/bin/sh
ln -sf /opt/sbin/openvpn /etc/openvpn/vpnserver1

This assumes that Entware is already mounted when the VPN server starts.

But I don't think this will work as a direct replacement because /opt/sbin/openvpn would need to run against the Entware libraries rather than the default firmware libraries. You might have to move your VPN server config fully over to Entware (/opt/etc/openvpn) and not use the Asus GUI at all.

 

[Matteo Guglielmi]

You could try creating a /jffs/scripts/openvpnserver1.postconf file as follows:

#!/bin/sh
ln -sf /opt/sbin/openvpn /etc/openvpn/vpnserver1

This assumes that Entware is already mounted when the VPN server starts.

But I don't think this will work as a direct replacement because /opt/sbin/openvpn would need to run against the Entware libraries rather than the default firmware libraries. You might have to move your VPN server config fully over to Entware (/opt/etc/openvpn) and not use the Asus GUI at all.

Well it works but the way Entware compiled openvpn is quite different from merlin's fw way.

In particular, all the following options are set to off in Entware:

enable_iproute2=yes
enable_management=yes
enable_plugin_auth_pam=yes
enable_plugin_down_root=yes
enable_plugins=yes
enable_server=yes

Do you know how to create custom Entware packages?

(I'm currently looking for some howto...)