New Build - 08/22/2020 - r44236

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware
Goto page Previous  1, 2
Author Message
NFear
DD-WRT Novice


Joined: 12 Jan 2018
Posts: 10

PostPosted: Mon Aug 24, 2020 19:32    Post subject: Reply with quote
Hi egc,

Thanks for your advice. In my case, The = is definitely missing on the Tunnels page using the latest firmware. The screenshots were taken on the same monitor and Firefox 79 in full screen mode. You can clearly see, that it is not a matter of the size of the box. Even if I use the cursor to get to the end or ctrl+a and ctrl+c: there is no =at the end. Even tried it on an iPad, same result.

The = is also missing when I retrieve the key via nvram get oet1_public or oet1_peerkey0. So it is not just a cosmetic problem. Before the upgrade keys are correct. After the upgrade, all keys are missing the = at the end. Just tried to connect via iPad and iPhone using existing WireGuard settings (= at the end). Works! The WireGuard log on iOS shows that the expected key (without =) was found! What??
Trying to change the Settings on the iOS app (remove =) gives an error message that this is not a valid key in 32 bit and base64 encoding.

My conclusion: The upgrade somehow breaks / alters the stored key settings by deleting / overwriting the last byte in the NVRAM settings. But this does obviously not affect establishing the connection with “almost” correct keys.

I know this looks like I made it all up, but this is really as it is.

The screenshots were taken directly before and after the upgrade. I did not change anything else at all. I experienced this behavior before when upgrading to 44213. This is why I took the screenshots this time.

Sorry to bother you with this really strange behavior, but I am just curious what is going on here.
Sponsor
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 6625
Location: Netherlands

PostPosted: Mon Aug 24, 2020 20:00    Post subject: Reply with quote
NFear wrote:
Hi egc,

Thanks for your advice. In my case, The = is definitely missing on the Tunnels page using the latest firmware. The screenshots were taken on the same monitor and Firefox 79 in full screen mode. You can clearly see, that it is not a matter of the size of the box. Even if I use the cursor to get to the end or ctrl+a and ctrl+c: there is no =at the end. Even tried it on an iPad, same result.

The = is also missing when I retrieve the key via nvram get oet1_public or oet1_peerkey0. So it is not just a cosmetic problem. Before the upgrade keys are correct. After the upgrade, all keys are missing the = at the end. Just tried to connect via iPad and iPhone using existing WireGuard settings (= at the end). Works! The WireGuard log on iOS shows that the expected key (without =) was found! What??
Trying to change the Settings on the iOS app (remove =) gives an error message that this is not a valid key in 32 bit and base64 encoding.

My conclusion: The upgrade somehow breaks / alters the stored key settings by deleting / overwriting the last byte in the NVRAM settings. But this does obviously not affect establishing the connection with “almost” correct keys.

I know this looks like I made it all up, but this is really as it is.

The screenshots were taken directly before and after the upgrade. I did not change anything else at all. I experienced this behavior before when upgrading to 44213. This is why I took the screenshots this time.

Sorry to bother you with this really strange behavior, but I am just curious what is going on here.


Could you be running out of nvram space?

If the peer key is really missing the = then you should not be able to make a connection.

The local public key is derived from the private key but not if the private key is missing the = then the local public key is not even calculated.

So this is really strange

_________________
Routers:Netgear R7800, R6400v1, R6400v2, Linksys EA8500, EA6900 (XvortexCFE), E2000 (converted WRT320N), WRT54GS v1.
OpenVPN Policy Based Routing: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=321686
Install guide R6400v2:http://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
OpenVPN Server Setup:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=318795
Install guide R7800: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Wireguard Server setup guide:https://forum.dd-wrt.com/phpBB2/viewtopic.php?p=1183135
Wireguard Client setup guide:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324624
Wireguard Advanced setup guide:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324787
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
NFear
DD-WRT Novice


Joined: 12 Jan 2018
Posts: 10

PostPosted: Tue Aug 25, 2020 9:40    Post subject: Reply with quote
Quote:
Could you be running out of nvram space?


No, 37KiB of 64Kib used

Quote:
If the peer key is really missing the = then you should not be able to make a connection.

I know, but please see the attached screenshot an the log part:

Code:
2020-08-25 10:24:57.024207: [NET] peer(XnpN…hXl4) - Sending handshake initiation
2020-08-25 10:24:57.026549: [NET] peer(XnpN…hXl4) - Awaiting keypair
2020-08-25 10:24:57.026870: [APP] Tunnel 'Solarhaus' connection status changed to 'connected'
2020-08-25 10:24:57.050298: [NET] peer(XnpN…hXl4) - Received handshake response
2020-08-25 10:24:57.050512: [NET] peer(XnpN…hXl4) - Obtained awaited keypair
2020-08-25 10:24:57.056540: [NET] peer(XnpN…hXl4) - Receiving keepalive packet


Quote:
The local public key is derived from the private key but not if the private key is missing the = then the local public key is not even calculated.


Maybe it is just a clever implementation. WireGuard keys always end with an =. Thus, you can save memory by omitting the = when saving individual keys. The key calcualation should be independent of the = at the end. It is neither a "real" part of the key, nor a checkdigit, but an identifier. The real key seems to be the part before the =.



settings1.jpg
 Description:
 Filesize:  24.13 KB
 Viewed:  948 Time(s)

settings1.jpg


SinCalChewy
DD-WRT User


Joined: 09 Nov 2014
Posts: 312
Location: Bakersfield, CA

PostPosted: Thu Aug 27, 2020 12:51    Post subject: Reply with quote
Router/Version: 4x Netgear R7000
Firmware: DD-WRT v3.0-r44236 std (08/22/20)
Kernel: Linux 4.4.232 #911 SMP Fri Aug 21 08:45:00 +04 2020 armv7l
Previous: DD-WRT v3.0-r44213 std (08/18/20)
Mode: Two Gateways, Two Client Bridges
Reset: No
Status: Seems good to go so far! Will report back if something comes up Smile

_________________

Deployed Routers:
Netgear R7000 - 5x build 44538M
- Gateway: DoT/DoH, CAKE QoS, USB /w Entware
- Second Subnet Gateway: CAKE QoS, USB /w Entware
- Client Bridge x3: USB /w Entware

Spares/Backups/Collection:
Too many to list. I have old routers, bricked routers, weird routers. You name it.
PJTraveler
DD-WRT Novice


Joined: 15 Apr 2019
Posts: 6

PostPosted: Mon Aug 31, 2020 15:12    Post subject: Reply with quote
Router: ASUS AU68
Firmware: Firmware: DD-WRT v3.0-r44236 std (08/22/20)
Kernel: Linux 4.4.232 #911 SMP Fri Aug 21 08:45:00 +04 2020 armv7l
Previous version: 44085
Mode: Gateway
reset: No
Status:
DNS Issues (DNS_PROBE_FINISHED_BAD_CONFIG) start showing up after about 24 hrs. Occurs both with and without SmartDNS resolver enabled. Multiple retries will eventually get a name resolved. Rebooting router seems to improve the situation for a while. DNSMasq is enabled.
Following DNS features Enabled:
DNSmasq
Cache DNSSEC data
Check unsigned DNSreplies
No DNS rebind
RFC 4039 Rapid commit support
Max cached entries=19500

NSLOOKUP returns immediately when using google and times out using router



2020-08-31_8-09-50.png
 Description:
Buffers
 Filesize:  31.9 KB
 Viewed:  458 Time(s)

2020-08-31_8-09-50.png


NetSonic
DD-WRT Novice


Joined: 31 Aug 2020
Posts: 8

PostPosted: Mon Aug 31, 2020 16:10    Post subject: Reply with quote
---Post removed due to my error---

Last edited by NetSonic on Tue Sep 01, 2020 14:26; edited 2 times in total
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 6625
Location: Netherlands

PostPosted: Mon Aug 31, 2020 16:36    Post subject: Reply with quote
NetSonic wrote:
Router Model / Version: Netgear r8000
Previous Firmware: --- (Tomato firmware)
Current Firmware: DD-WRT v3.0-r44251 std (08/27/20)
File: netgear-r8000-webflash.bin
Kernel: Linux 4.4.233 #936 SMP Thu Aug 27 17:44:00 +04 2020 armv7l
Reset: Yes. Once before, once after
Mode: Wireless - AP
Setup: Basic


Issues: In Setup > Networking > Assign to Bridge, wireless interfaces are missing from the "Interfaces" column. The result is that you cannot assign a wireless interface to a bridge you create. I am attaching an image to illustrate this problem.


It might be a bug but this is not a support thread so consider opening a new thread to discuss this, see forum guidelines in my signature ,besides router model and build number it is helpful if you state your network setup and used guides.
For me a Wireless-AP is a WAP: https://wiki.dd-wrt.com/wiki/index.php/Wireless_Access_Point Smile

_________________
Routers:Netgear R7800, R6400v1, R6400v2, Linksys EA8500, EA6900 (XvortexCFE), E2000 (converted WRT320N), WRT54GS v1.
OpenVPN Policy Based Routing: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=321686
Install guide R6400v2:http://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
OpenVPN Server Setup:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=318795
Install guide R7800: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Wireguard Server setup guide:https://forum.dd-wrt.com/phpBB2/viewtopic.php?p=1183135
Wireguard Client setup guide:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324624
Wireguard Advanced setup guide:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324787
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
PJTraveler
DD-WRT Novice


Joined: 15 Apr 2019
Posts: 6

PostPosted: Mon Aug 31, 2020 22:42    Post subject: Reply with quote
This problem seems to have started with the removal of DNSMASQ options. Not asking for support, but reporting as a problem symptom.
Goto page Previous  1, 2 Display posts from previous:    Page 2 of 2
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum