Openssl 3.x.x and libopenssl 1.1.1xx

Post new topic   Reply to topic    DD-WRT Forum Index -> General Questions
Goto page Previous  1, 2, 3, 4  Next
Author Message
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14249
Location: Texas, USA

PostPosted: Fri Aug 11, 2023 16:14    Post subject: Reply with quote
Jen1 wrote:
English is not my native language, can you please elaborate how on earth giving a feedback / asking a question / or even requesting (politely) in an open forum is "bullying"?

What is your native language?

Simply put, the lead developer does not need the noise as he is following package development to a gnat's ass bit of accuracy.

We would think that someone on this forum who claims to be ASD would understand, but here this thread is, in plain sight.

It's abusive (punishable by international law) and should be locked, but the decries of freedom being taken would stir up a shit storm.

Anyway, "now" is "not a good time" in the larger picture of things, so please... for the love of ALL things DD-WRT, knock it off.

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
Sponsor
Jen1
DD-WRT User


Joined: 12 Apr 2020
Posts: 51

PostPosted: Fri Aug 11, 2023 18:35    Post subject: Reply with quote
kernel-panic69 wrote:
Jen1 wrote:
English is not my native language, can you please elaborate how on earth giving a feedback / asking a question / or even requesting (politely) in an open forum is "bullying"?

What is your native language?

Simply put, the lead developer does not need the noise as he is following package development to a gnat's ass bit of accuracy.

We would think that someone on this forum who claims to be ASD would understand, but here this thread is, in plain sight.

It's abusive (punishable by international law) and should be locked, but the decries of freedom being taken would stir up a shit storm.

Anyway, "now" is "not a good time" in the larger picture of things, so please... for the love of ALL things DD-WRT, knock it off.


How low IQ must one have to ask a question and expect an answer after a low, degraded language and none sense?

If you think that you can intimidate me with threats of legal actions then you are wrong, on the contrary after your threat and degraded language, which I will not stoop to, you encouraged me investigate and check DD-WRT and the company behind it "embeDD GmbH", and here is what I found:

It made a profit of 5 million dollars. A company that make firmware (open source) for the public made a profit of 5 million dollars, and we are not even talking about the salaries. https://www.zoominfo.com/c/embedd-gmbh/539132971

That made me suspicious!

Now I believe, that this company, intentionally leave backdoors for intelligence agencies and other governmental agencies and get paid for it. Now I know why "users" get annoyed here when I ask to immediately patch any CVE fixed by the other developers.

I today remove DD-WRT firmware as I believe it contain backdoors for intelligence agencies and reinstalled my ASUS native firmware.

I will spread my believes about DD-WRT firmware, using your aggressive and degraded language to leave some packages not patched although it will take seconds to patch them.

I already archive all the conversation,

https://web.archive.org/web/20230811174349/https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=334213
https://web.archive.org/web/20230811174552/https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=334213&postdays=0&postorder=asc&start=15
https://web.archive.org/web/20230811174730/https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=334213&postdays=0&postorder=asc&start=30
https://www.zoominfo.com/c/embedd-gmbh/539132971
https://web.archive.org/web/20230811180711/https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=334847
https://web.archive.org/web/20230811180834/https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=334847&postdays=0&postorder=asc&start=15


I will spread all my believes all over the internet, and with all tech forums and warn about DD-WRT. And I dare you, to sue me for defamation and I will be more than happy to take this to court.

_________________
Asus RT-AC88U
Donations
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12922
Location: Netherlands

PostPosted: Fri Aug 11, 2023 18:45    Post subject: Reply with quote
Interesting and what has embeDD to do with DDWRT?

For some DDWRT info:
https://dd-wrt.com/about/
http://www.newmedia-net.de/en/home.html

I am afraid the paranoia got a hold on you

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14249
Location: Texas, USA

PostPosted: Fri Aug 11, 2023 20:01    Post subject: Reply with quote
Not going to respond to the stupidity or ignorance of @Jen1's previous comment other than to say that the linked page specifically states:

Revenue <$5M, meaning it's less than $5M USD
Rolling Eyes

Anyhow, to answer the question asked by @egc: lower right corner of forum © 2022 EmbeDD GmbH - and main website page(s): Copyright © 2023 embeDD GmbH

https://dd-wrt.com/imprint/

https://embedd.com/en/

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 6447
Location: UK, London, just across the river..

PostPosted: Sat Aug 12, 2023 9:07    Post subject: Reply with quote
for updated information on the subject Openssl 3.1.x and libopenssl 1.1.1xx ill keep my first post updated.... Razz Razz

https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=334213


@Jen1 your rampant and whimsical behaviour is underlined with a lack of knowledge and your claims are very scarce Ill eschew of any further comment...

I hope you will be awarded with separate thread where you guys can continue your 'bickering' ... i admit its a popcorn time Laughing Cool Very Happy

_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14249
Location: Texas, USA

PostPosted: Sun Sep 03, 2023 11:25    Post subject: Reply with quote
OpenSSL and OpenVPN will be updated in the next release:

https://svn.dd-wrt.com/changeset/53453

https://svn.dd-wrt.com/changeset/53454

#yayforumfodder

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 6447
Location: UK, London, just across the river..

PostPosted: Wed Sep 06, 2023 9:09    Post subject: Reply with quote
Yep Entware just updated...
Upgrading libopenssl on root from 3.0.8-9 to 3.0.10-1...

DDWRT is also following with libopenssl 1.1.1v update post/after 53455 ...

_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14249
Location: Texas, USA

PostPosted: Sat Sep 23, 2023 13:59    Post subject: Reply with quote
Still one more update for 1.1.1, but it looks like there will have to be some kind of
upgrade or other method of keeping it. Of course, they would publish that on 9-11 Rolling Eyes

https://github.com/openssl/openssl/releases/tag/OpenSSL_1_1_1w

https://www.openssl.org/

https://www.openssl.org/blog/blog/2023/09/11/eol-111/

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
mwchang
DD-WRT Guru


Joined: 26 Mar 2013
Posts: 1858
Location: Hung Hom, Hong Kong

PostPosted: Sat Sep 23, 2023 16:09    Post subject: Reply with quote
kernel-panic69 wrote:
Still one more update for 1.1.1, but it looks like there will have to be some kind of
upgrade or other method of keeping it. Of course, they would publish that on 9-11 Rolling Eyes

https://github.com/openssl/openssl/releases/tag/OpenSSL_1_1_1w
https://www.openssl.org/
https://www.openssl.org/blog/blog/2023/09/11/eol-111/

Not good news??? Especially from the point of adapting 1.1.1 source codes to work in DD-WRT... Smile
Quote:
OpenSSL 1.1.1 series has reached its End of Life (EOL). As such it will no longer receive publicly available security fixes.
....
If you downloaded your copy of OpenSSL 1.1.1 direct from the OpenSSL project then it is time to upgrade to a more recent version. Our most recent version is OpenSSL 3.1 ....

_________________
Router: Asus RT-N18U (rev. A1)

Drink, Blink, Stretch! Live long and prosper! May the Force and farces be with you!

Facebook: https://www.facebook.com/changmanwai
Website: https://sites.google.com/site/changmw
SETI@Home profile: http://setiathome.berkeley.edu/view_profile.php?userid=211832
GitHub: https://github.com/changmw/changmw
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14249
Location: Texas, USA

PostPosted: Sat Sep 23, 2023 19:29    Post subject: Reply with quote
I think you meant "adapting OpenSSL v3.x"... there was a huge issue with the previous attempt to migrate to the newer version and it was vehemently reverted.
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 6447
Location: UK, London, just across the river..

PostPosted: Sun Sep 24, 2023 6:20    Post subject: Reply with quote
mwchang if you read between the lines, there will be a support of 1.1.1.xx but you have to pay for it i guess.. Rolling Eyes

"Another option is to purchase a premium support contract which offers extended support (i.e. ongoing access to security fixes) for 1.1.1 beyond its public EOL date. There is no defined end date for this extended support and we intend to continue to provide it for as long as it remains commercially viable for us to do so (i.e. for the foreseeable future). Further information is available on our support contracts page. Email osf-contact@openssl.org for further information."

OpenWRT and entware are on ver. 3.0.xx already but that doesn't mean DDWRT should switch to it too…

p.s. as well the new update is regarding bugs towards a win based machines, if im not wrong… even running latest intel CPU's with AVX512-IFMA instruction...so no need to rock the boat but it's good to be done i believe...

"POLY1305 MAC implementation corrupts XMM registers on Windows (CVE-2023-4807)..."


Thanks to KP-69 to keep the thread alive..as well...
cheeses

_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
mwchang
DD-WRT Guru


Joined: 26 Mar 2013
Posts: 1858
Location: Hung Hom, Hong Kong

PostPosted: Mon Sep 25, 2023 10:36    Post subject: Reply with quote
kernel-panic69 wrote:
I think you meant "adapting OpenSSL v3.x"... there was a huge issue with the previous attempt to migrate to the newer version and it was vehemently reverted.

It would have to find out whether OpenSSL 3.x.x was supposed to work with old Linux kernels like 4.x. Also, it would have to find out what DD-WRT functions are being tightly coupled with 1.1.1!

But.... above all these...

Shouldn't OpenSSL 3.x work just like 1.1.1?? Independent of the kernel version? Smile

(BTW....

To list programs of DD-WRT that are tightly coupled with OpenSSL 1.1.1, one might write a simple Perl/PHP/Python/Foxpro source code scanner. It's like finding out what source codes in an old system that's not Year-2000 compliant. Smile
)

_________________
Router: Asus RT-N18U (rev. A1)

Drink, Blink, Stretch! Live long and prosper! May the Force and farces be with you!

Facebook: https://www.facebook.com/changmanwai
Website: https://sites.google.com/site/changmw
SETI@Home profile: http://setiathome.berkeley.edu/view_profile.php?userid=211832
GitHub: https://github.com/changmw/changmw


Last edited by mwchang on Mon Sep 25, 2023 10:52; edited 1 time in total
mwchang
DD-WRT Guru


Joined: 26 Mar 2013
Posts: 1858
Location: Hung Hom, Hong Kong

PostPosted: Mon Sep 25, 2023 10:47    Post subject: Reply with quote
Alozaros wrote:
mwchang if you read between the lines, there will be a support of 1.1.1.xx but you have to pay for it i guess.. Rolling Eyes

I don't think DD-WRT has the money as DD-WRT is basically freeware. So I assumed that DD-WRT would never "purchase a premium support contract" from OpenSSL.

That's why I did NOT quote the "premium support contract" part. It sounds like a blackmail. And We freeware users will never surrender to "terrorists" as well. Smile

_________________
Router: Asus RT-N18U (rev. A1)

Drink, Blink, Stretch! Live long and prosper! May the Force and farces be with you!

Facebook: https://www.facebook.com/changmanwai
Website: https://sites.google.com/site/changmw
SETI@Home profile: http://setiathome.berkeley.edu/view_profile.php?userid=211832
GitHub: https://github.com/changmw/changmw
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 6447
Location: UK, London, just across the river..

PostPosted: Sun Feb 25, 2024 9:03    Post subject: Reply with quote
New Entware update as well updated libopenssl_3.0.13-1

"Upgrading libopenssl on root from 3.0.10-1 to 3.0.13-1...
Downloading https://bin.entware.net/armv7sf-k3.2/libopenssl_3.0.13-1_armv7-3.2.ipk"



DDWRT still on the old 1.1.1 and not the last version.. if im not wrong... Laughing

_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
nickant
DD-WRT User


Joined: 09 Feb 2016
Posts: 321

PostPosted: Sun Feb 25, 2024 10:44    Post subject: Reply with quote
Just as an aside, Openwrt 23.05.2 Stable using 5.15 kernel and updated via opkg, currently includes libopenssl3 3.0.13-1
_________________
------------------------------------
Linksys WRT3200ACM DD-WRT r55819 (Gateway)
Linksys EA8500 OpenWrt-23.05.3 (Wired AP)
Netgear WNDR3700v4 DD-WRT r55819 (spare Gateway)
Photos: https://www.flickr.com/photos/nickant44/albums
Goto page Previous  1, 2, 3, 4  Next Display posts from previous:    Page 3 of 4
Post new topic   Reply to topic    DD-WRT Forum Index -> General Questions All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum