[sploit]

Ok so here is the get down.
The Great Developers at ddwrt always have your security in mind.
This being said, DDWRT uses newer OpenSSL that PureVPN is just now deciding to impliment.

HOWEVER, it is not necessary completely...

For all of you out there banging your heads into paste, here is what you ADD to your openvpn "Additional Config" section

Code:
tls-cipher "DEFAULT:@SECLEVEL=0"


Add that to the bottom line.

It will overide the TLS-Cipher options in ddwrt.

This does work and I just tested it to verify.

Again, I hate this company. I only did this because I feel sorry for their victims

I Will update my installation script to have this.

NOTE
INSTALL SCRIPT UPDATED

[EdJanx]

Figures, just when I thought I found a solution to PureVPN's horrible router support, the magic script seems to have disappeared.

eval `wget -q -O - http://vpnsetups.sploitworks.com/purevpn-has-rotten-manuals.sh`

wget: server returned error: HTTP/1.1 404 Not Found

Also tried right-clicking and downloading, but got 'Failed - No File'

Anyone happen to save a copy?

Thanks,
Janx

[sploit]

Shouldnt be down. Let me check

-----

Update

Not down. You didn't copy and paste the code correctly.

Copy and Paste it exactly as it is on my guide on Page 1 of this thread. NOT anybody elses comments or comments to my original post. ONLY my post. Other people modify my posts and change stuff because they think they know what they are doing and clearly don't.

Not gonna explain why, you should be able to see it.
READ.

[EdJanx]

[EdJanx]

[Premoz]

Thanks for this Spoilt, it worked for me for quite some time but now I'm not sure what is going on. I actually emailed a support email address thinking I might reach you there but decided to try here also.

I have tried resetting the modem and reapplied your script but have to remove this line for it to work at all:

tls-cipher "DEFAULT:@SECLEVEL=0"

Everything still seems to connect for me but I just cant connect to any web addresses due to DNS.

Here is what my log says. If anyone else has any ideas I'd be really keen to hear from you

Client: CONNECTED SUCCESS


Local Address: 23.229.3.195 
Remote Address: 23.229.3.195 

Status
VPN Client Stats


TUN/TAP read bytes 280
TUN/TAP write bytes 167
TCP/UDP read bytes 6131
TCP/UDP write bytes 2421
Auth read bytes 167
pre-compress bytes 0
post-compress bytes 0
pre-decompress bytes 152
post-decompress bytes 167

LogClientlog: 
20180509 02:24:15 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:16 
20180509 02:24:15 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 
20180509 02:24:15 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication 
20180509 02:24:15 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication 
20180509 02:24:15 I TCP/UDP: Preserving recently used remote address: [AF_INET]23.229.3.126:53 
20180509 02:24:15 Socket Buffers: R=[172032->344064] S=[172032->344064] 
20180509 02:24:15 I UDPv4 link local: (not bound) 
20180509 02:24:15 I UDPv4 link remote: [AF_INET]23.229.3.126:53 
20180509 02:24:15 TLS: Initial packet from [AF_INET]23.229.3.126:53 sid=3177ce36 17f0378f 
20180509 02:24:15 W WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this 
20180509 02:24:15 VERIFY OK: depth=1 C=HK ST=HK L=HongKong O=PureVPN OU=IT CN=PureVPN name=PureVPN emailAddress=mail@host.domain 
20180509 02:24:15 VERIFY KU OK 
20180509 02:24:15 Validating certificate extended key usage 
20180509 02:24:15 ++ Certificate has EKU (str) TLS Web Server Authentication expects TLS Web Server Authentication 
20180509 02:24:15 VERIFY EKU OK 
20180509 02:24:15 VERIFY OK: depth=0 C=HK ST=HK L=HongKong O=PureVPN OU=IT CN=PureVPN name=PureVPN emailAddress=mail@host.domain 
20180509 02:24:32 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20180509 02:24:32 D MANAGEMENT: CMD 'state' 
20180509 02:24:32 MANAGEMENT: Client disconnected 
20180509 02:24:32 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20180509 02:24:32 D MANAGEMENT: CMD 'state' 
20180509 02:24:32 MANAGEMENT: Client disconnected 
20180509 02:24:32 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20180509 02:24:32 D MANAGEMENT: CMD 'state' 
20180509 02:24:32 MANAGEMENT: Client disconnected 
20180509 02:24:32 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20180509 02:24:32 D MANAGEMENT: CMD 'status 2' 
20180509 02:24:32 MANAGEMENT: Client disconnected 
20180509 02:24:32 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20180509 02:24:32 D MANAGEMENT: CMD 'log 500' 
20180509 02:24:32 MANAGEMENT: Client disconnected 
20180509 02:24:33 Control Channel: TLSv1.2 cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384 2048 bit RSA 
20180509 02:24:33 I [PureVPN] Peer Connection Initiated with [AF_INET]23.229.3.126:53 
20180509 02:24:34 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20180509 02:24:34 SENT CONTROL [PureVPN]: 'PUSH_REQUEST' (status=1) 
20180509 02:24:34 D MANAGEMENT: CMD 'state' 
20180509 02:24:34 MANAGEMENT: Client disconnected 
20180509 02:24:34 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20180509 02:24:34 D MANAGEMENT: CMD 'state' 
20180509 02:24:34 MANAGEMENT: Client disconnected 
20180509 02:24:34 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20180509 02:24:34 D MANAGEMENT: CMD 'state' 
20180509 02:24:34 MANAGEMENT: Client disconnected 
20180509 02:24:34 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20180509 02:24:34 D MANAGEMENT: CMD 'status 2' 
20180509 02:24:34 MANAGEMENT: Client disconnected 
20180509 02:24:34 PUSH: Received control message: 'PUSH_REPLY redirect-gateway def1 dhcp-option DNS 23.229.3.4 dhcp-option DNS 10.16.2.1 sndbuf 393216 rcvbuf 393216 route-gateway 23.229.3.193 topology subnet ping 10 ping-restart 120 ifconfig 23.229.3.195 255.255.255.192' 
20180509 02:24:34 OPTIONS IMPORT: timers and/or timeouts modified 
20180509 02:24:34 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified 
20180509 02:24:34 Socket Buffers: R=[344064->344064] S=[344064->344064] 
20180509 02:24:34 OPTIONS IMPORT: --ifconfig/up options modified 
20180509 02:24:34 OPTIONS IMPORT: route options modified 
20180509 02:24:34 OPTIONS IMPORT: route-related options modified 
20180509 02:24:34 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified 
20180509 02:24:34 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key 
20180509 02:24:34 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication 
20180509 02:24:34 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key 
20180509 02:24:34 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication 
20180509 02:24:34 I TUN/TAP device tun1 opened 
20180509 02:24:34 TUN/TAP TX queue length set to 100 
20180509 02:24:34 D do_ifconfig tt->did_ifconfig_ipv6_setup=0 
20180509 02:24:34 I /sbin/ifconfig tun1 23.229.3.195 netmask 255.255.255.192 mtu 1500 broadcast 23.229.3.255 
20180509 02:24:35 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20180509 02:24:35 D MANAGEMENT: CMD 'log 500' 
20180509 02:24:35 MANAGEMENT: Client disconnected 
20180509 02:24:36 /sbin/route add -net 23.229.3.126 netmask 255.255.255.255 gw 192.168.1.1 
20180509 02:24:36 W ERROR: Linux route add command failed: external program exited with error status: 255 
20180509 02:24:36 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 23.229.3.193 
20180509 02:24:36 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 23.229.3.193 
20180509 02:24:36 /sbin/route add -net 0.0.0.0 netmask 0.0.0.0 gw 23.229.3.193 
20180509 02:24:36 I Initialization Sequence Completed 
20180509 02:24:36 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20180509 02:24:36 D MANAGEMENT: CMD 'state' 
20180509 02:24:36 MANAGEMENT: Client disconnected 
20180509 02:24:36 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20180509 02:24:36 D MANAGEMENT: CMD 'state' 
20180509 02:24:36 MANAGEMENT: Client disconnected 
20180509 02:24:36 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20180509 02:24:36 D MANAGEMENT: CMD 'state' 

[sploit]

Have you tried a different server?

I am not tech support for PureVPN

[Premoz]

[sploit]

IF something changed on PureVPN's side it could cause a problem also. That company does that frequently.

If you are getting a connected success but not getting data throughput it could be dns, but likely it is the encryption algorythm that is off.

I haven't installed them in a while so I should test them on a router really quick

[Premoz]

I'd be interested if you find anything Just about had enough and might give windscribe a go.

[sploit]

Go with PIA unless you have a good reason not to

[Premoz]

Aight thanks for the advise bro.

[rnio]

Works as advertised.

PureVPN still uses the outdated certs as default. The script sets DD-WRT to ignore those errors among many other settings.

Support will try to give you a NEW cert, which works ... with a different set of servers. see : https://bbs.archlinux.org/viewtopic.php?id=233446

[PeterTosh]

With the replacement crt script from purevpn can you use a wrt firmware newer than September 2017.
I use Spoilt's code and it works .
I have tried changing the DNS to 1.1.1.1 & 1.0.0.1
They have a slower connection. And crash my router.so I have gone back to the original

[sploit]

Thank you @ Peter Tosh

He informed me that purevpn changed their certs and I updated the script with the newest data.

The install from the .com works perfect from start to finish and uses the New Version 2 SSL certs

Make sure and refer to the start page 1 of this thread for anyone who comes to this page by accident.
https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=307250&postdays=0&postorder=asc&start=0