Gargoyle 1.15.x BETA - 2024-11-13 - Based on OpenWrt 23.05

[Lantis]

Do you know what version of 1.15 you have installed?
I will try to reproduce the error but may require more detail.

[hillbilly]

I have version 1.15.X (Built 20241014-0330 git@347e0534) on TP-Link Archer A6 v3.

Just noticed it rebooted a few times this morning, up for 10 to 25 minutes. I do have 60+ DHCP static IP. And a few Firewall rules. Will disable the firewall rules now to see if it's more stable.

[hillbilly]

>> Just noticed it rebooted a few times this morning, up for 10 to 25 minutes. I do have 60+ DHCP static IP. And a few Firewall rules. Will disable the firewall rules now to see if it's more stable.

I've disable a firewall rule, it has stayed up for a good number of hours now.

The Firewall Restriction I created was to block 10 strings. IP Family: Both, Website URL - block only - full url containing... it contain 10 address in the list I wanted to block. With that enabled, it was rebooting after 10+ minutes.


Also I noticed the Themes are no longer there. Can that be put back? Or is there a way to download them an install them manually?
Thank you.

[Lantis]

Note: I have moved the posts to this topic to keep everything in the same spot.

I can reproduce the certificate error.
As a workaround (assuming you have sufficient space on the device) you can:

Code: Select all

gpkg update
gpkg install openssl-util
##(Make sure this completes correctly. You may need to force this or manually intervene).##
openssl genpkey -algorithm rsa -out /etc/uhttpd.key -pkeyopt rsa_keygen_bits:2048
openssl req -new -key /etc/uhttpd.key -out /etc/uhttpd.csr -subj '/O=gargoyle-router.com/CN=Gargoyle Router Management Utility' -sha256
openssl x509 -req -days 3650 -in /etc/uhttpd.csr -signkey /etc/uhttpd.key -out /etc/uhttpd.crt

I believe Chrome (or Chromium based browsers) may be enforcing that v3 certificates contain a Subject Alternate Name extension, which I did not originally include as a capability in mbedtls-clu.
I am writing that capability now and will verify that it works and confirm back.

I will separately look into weburl blocking crash. Other users have also reported it, looks like a memory leak in the kernel (although I don't really understand why at the moment, the change I made should not have resulted in this). This will take time.
Rolling back to 2024-05-20 beta should be before the likely bad code. Anyone confirming which version introduces the issue would be helpful.

For themes, please add the plugins repo from my site relevant to your router.

[Lantis]

Fixes for the certificate error and weburl filtering memory leak (crash) will be posted by end of the week.
I'm just running a final overnight test to see if there is still a leak.

[angus]

Hi Lantis,
When browsing test-ipv6.com, I see Your IPv6 address on the public Internet appears to be 2001:0DB8:71b8:e19ae07ed8cd on that web. This is a bit strange since I couldn't find any IPv6 addresses that contain 2001:db8:: prefix assigned to my laptop. Some kind of proxy apps running on my router to confuse test-ipv6.com and they make addresses with 2001:db8:: prefix used? Gargoyle version is 1.15.X (Built 20241014-0219 git@347e0534). Thanks.

[Lantis]

Is it windows? You can check all the IPv6 addresses it is using by ipconfig /all

However, that address you’ve listed being in the 2001:0DB8::/32 range is very clearly from the “documentation prefix” and should not be used on the internet. So it could also possibly be an error from the site? Have you cross verified with any others?

https://datatracker.ietf.org/doc/html/rfc3849

[Lantis]

New build uploaded

[MrZedS]

Greetings.
I am a happy Italian owner of a GL MT-6000 with a 2.5 Gbit/1 Gbit connection over PPPoE.
I tried this firmware out of curiosity and was pleasantly impressed by its stability and p2p management.
I wanted to ask a few things:
1) I have activated packet steering, but unfortunately I cannot achieve the speed on a single Ethernet device that I achieved with the stock firmware.
2) Is the implementation of WiFi activation/deactivation without disconnecting the connection planned for future releases?
Would there also be the possibility of inserting programming to turn the wifi on and off at pre-established times?
Thanks so much again

[Lantis]

What sort of speed are you getting and what did you get previously?
Pppoe makes a difference but I’ll comment more on real numbers.

Yes I do intend to add a feature to disable wifi separately to the main connection page.
There is an existing wifi schedule plugin you can install and try. I have not used it in a long time but it still worked last I checked.