[APP] openvpn-2.3.12 D(arm)/E/F/H + tun.ko

[langioletto]

Attached

OpenVPN 2.3.12 compiler for arm
Compiled with VDLinux-ARMv7-4.4-202-toolchain-v2r2-20110630, openssl-1.0.2j, lzo-2.09

tun.ko_vmagic_0152

tun.ko_vmagic_0110

tun.ko_vmagic_0081

tun.ko_vmagic_0064

openssl-1.0.2j:
libcrypto.so.1.0.0
libssl.so.1.0.0

lzo-2.09:
liblzo2.so.2

lib path:
/mnt/opt/privateer/lib

lib bin:
/mnt/opt/privateer/bin

permits 755 all file

Thanks to all the post here: https://forum.samygo.tv/viewtopic.php?f=63&t=6293

[tobi148]

Dear langioletto,

I think a lot of users are also looking for an OpenVPN version without the validation of the certificate expiration dates since enabling NTP is causing some issues. I read some stuff in the net and it seems that the check for certificate validation is embedded in the ssl.c file (https://community.openvpn.net/openvpn/ticket/199). Could you simply compile a version with another ssl.c file?
I think I have narrowed down the line in the ssl.c file which needs to be deleted or commented out (located in src\openvpn):

Code: Select all

    /* Check certificate notBefore and notAfter */
  tls_ctx_check_cert_time(new_ctx);

Would you be so kind and compile another version with the attached ssl.c file?
Since it was a long time ago I compiled something on Linux and can't remember how to do it right, it would be awesome if you could simply exchange the ssl.c file and have it compiled.

[langioletto]

This is not the solution to the problem

The solution is to enter the time update from the internet, before launching openvpn

Sample scripts:

Code: Select all

#Synchronize time
 ntpclient -s -h pool.ntp.org -p 123
 openvpn --daemon --writepid /dtv/openvpn.client.pid --config $dir/openvpn/client.conf --cd $dir/openvpn

I attach the bin to synchronize time.

[tobi148]

I know that this would be the ideal solution but when synchronizing the time:
The PVR schedule is screwed up and several Apps are not working anymore (for instance Amazon Instant Video).

I do not know any way around to get those two things working with a synchronized time. (see also viewtopic.php?f=71&t=6685&p=51618&hilit ... sue#p51618)

[juusso]

i can imagine some work around... just an idea:
1. you set uptime to variable
2. do time sync and start oscam
3. set systime back to 1970...

[tobi148]

This seems to be quite legit and would be solving the issue for the SmartHub apps but it does not solve the problem for the PVR timer, as soon as the ntp client synchronizes the time all your scheduled recordings are gone (because they already occured in the past and there is no possibility to get them back)

[langioletto]

Today I have no problems with ntp and SmartHub

[bobiturboto]

With your bin file and solution? Thanks

Sent from my D6503 using Tapatalk

[alterhack]

Hello, I tried to import all the tun.ko module listed above on my tv h series but did not work, so I Guess that I need to compile it for H series ?

Thanks

[sectroyer]

Dear langioletto,

I think a lot of users are also looking for an OpenVPN version without the validation of the certificate expiration dates since enabling NTP is causing some issues. I read some stuff in the net and it seems that the check for certificate validation is embedded in the ssl.c file (https://community.openvpn.net/openvpn/ticket/199). Could you simply compile a version with another ssl.c file?
I think I have narrowed down the line in the ssl.c file which needs to be deleted or commented out (located in src\openvpn):

Code: Select all

    /* Check certificate notBefore and notAfter */
  tls_ctx_check_cert_time(new_ctx);

Would you be so kind and compile another version with the attached ssl.c file?
Since it was a long time ago I compiled something on Linux and can't remember how to do it right, it would be awesome if you could simply exchange the ssl.c file and have it compiled.

This fixed ONLY checking of YOUR cert it will still complain about bad date in server cert
To fix server checking you ned to change this:

Code: Select all

  /* did peer present cert which was signed by our root cert? */
  if (!preverify_ok)
    {

into this:

Code: Select all

  /* did peer present cert which was signed by our root cert? */
  if (0)
    {

in file: src/openvpn/ssl_verify_openssl.c

Hello, I tried to import all the tun.ko module listed above on my tv h series but did not work, so I Guess that I need to compile it for H series ?

Thanks

You need tun.ko from this post, libs from first posts and bin from this post. One additional feature is that you don't have to use ntp, as this openvpn ignores time Looks on H with this openvpn you need to run one more command before starting:

Code: Select all

openvpn --dev-node /dtv/net/tun  --mktun --dev tun0

This will create tun0 network interface then you simply launch openvpn with:

Code: Select all

--dev-node /dtv/net/tun --dev tun0

Or simply add to your conf file this:

Code: Select all

dev tun0
dev-node /dtv/net/tun