Page 1 of 2
[APP] openvpn-2.3.12 D(arm)/E/F/H + tun.ko
Posted: Sun Oct 16, 2016 10:38 am
by langioletto
Attached
OpenVPN 2.3.12 compiler for arm
Compiled with VDLinux-ARMv7-4.4-202-toolchain-v2r2-20110630, openssl-1.0.2j, lzo-2.09
tun.ko_vmagic_0152
tun.ko_vmagic_0110
tun.ko_vmagic_0081
tun.ko_vmagic_0064
openssl-1.0.2j:
libcrypto.so.1.0.0
libssl.so.1.0.0
lzo-2.09:
liblzo2.so.2
lib path:
/mnt/opt/privateer/lib
lib bin:
/mnt/opt/privateer/bin
permits 755 all file
Thanks to all the post here: https://forum.samygo.tv/viewtopic.php?f=63&t=6293
Re: [APP] openvpn-2.3.12 D(arm)/E/F + tun.ko
Posted: Sat Nov 12, 2016 5:02 pm
by tobi148
Dear langioletto,
I think a lot of users are also looking for an OpenVPN version without the validation of the certificate expiration dates since enabling NTP is causing some issues. I read some stuff in the net and it seems that the check for certificate validation is embedded in the ssl.c file (
https://community.openvpn.net/openvpn/ticket/199). Could you simply compile a version with another ssl.c file?
I think I have narrowed down the line in the ssl.c file which needs to be deleted or commented out (located in src\openvpn):
Code: Select all
/* Check certificate notBefore and notAfter */
tls_ctx_check_cert_time(new_ctx);
Would you be so kind and compile another version with the attached ssl.c file?
Since it was a long time ago I compiled something on Linux and can't remember how to do it right, it would be awesome if you could simply exchange the ssl.c file and have it compiled.
Re: [APP] openvpn-2.3.12 D(arm)/E/F + tun.ko
Posted: Sat Nov 12, 2016 10:26 pm
by langioletto
This is not the solution to the problem
The solution is to enter the time update from the internet, before launching openvpn
Sample scripts:
Code: Select all
#Synchronize time
ntpclient -s -h pool.ntp.org -p 123
openvpn --daemon --writepid /dtv/openvpn.client.pid --config $dir/openvpn/client.conf --cd $dir/openvpn
I attach the bin to synchronize time.
Re: [APP] openvpn-2.3.12 D(arm)/E/F + tun.ko
Posted: Sun Nov 13, 2016 9:09 am
by tobi148
I know that this would be the ideal solution but when synchronizing the time:
The PVR schedule is screwed up and several Apps are not working anymore (for instance Amazon Instant Video).
I do not know any way around to get those two things working with a synchronized time. (see also
viewtopic.php?f=71&t=6685&p=51618&hilit ... sue#p51618)
Re: [APP] openvpn-2.3.12 D(arm)/E/F + tun.ko
Posted: Sun Nov 13, 2016 9:32 am
by juusso
i can imagine some work around... just an idea:
1. you set uptime to variable
2. do time sync and start oscam
3. set systime back to 1970...
Re: [APP] openvpn-2.3.12 D(arm)/E/F + tun.ko
Posted: Sun Nov 13, 2016 10:40 am
by tobi148
This seems to be quite legit and would be solving the issue for the SmartHub apps but it does not solve the problem for the PVR timer, as soon as the ntp client synchronizes the time all your scheduled recordings are gone (because they already occured in the past and there is no possibility to get them back)
Re: [APP] openvpn-2.3.12 D(arm)/E/F + tun.ko
Posted: Sun Nov 13, 2016 8:48 pm
by langioletto
Today I have no problems with ntp and SmartHub
Re: [APP] openvpn-2.3.12 D(arm)/E/F + tun.ko
Posted: Mon Nov 14, 2016 1:19 am
by bobiturboto
With your bin file and solution? Thanks
Sent from my D6503 using Tapatalk
Re: [APP] openvpn-2.3.12 D(arm)/E/F + tun.ko
Posted: Wed Jan 11, 2017 11:11 am
by alterhack
Hello, I tried to import all the tun.ko module listed above on my tv h series but did not work, so I Guess that I need to compile it for H series ?
Thanks
Re: [APP] openvpn-2.3.12 D(arm)/E/F + tun.ko
Posted: Wed Jan 11, 2017 5:26 pm
by sectroyer
tobi148 wrote:Dear langioletto,
I think a lot of users are also looking for an OpenVPN version without the validation of the certificate expiration dates since enabling NTP is causing some issues. I read some stuff in the net and it seems that the check for certificate validation is embedded in the ssl.c file (
https://community.openvpn.net/openvpn/ticket/199). Could you simply compile a version with another ssl.c file?
I think I have narrowed down the line in the ssl.c file which needs to be deleted or commented out (located in src\openvpn):
Code: Select all
/* Check certificate notBefore and notAfter */
tls_ctx_check_cert_time(new_ctx);
Would you be so kind and compile another version with the attached ssl.c file?
Since it was a long time ago I compiled something on Linux and can't remember how to do it right, it would be awesome if you could simply exchange the ssl.c file and have it compiled.
This fixed ONLY checking of YOUR cert it will still complain about bad date in server cert
To fix server checking you ned to change this:
Code: Select all
/* did peer present cert which was signed by our root cert? */
if (!preverify_ok)
{
into this:
Code: Select all
/* did peer present cert which was signed by our root cert? */
if (0)
{
in file: src/openvpn/ssl_verify_openssl.c
alterhack wrote:Hello, I tried to import all the tun.ko module listed above on my tv h series but did not work, so I Guess that I need to compile it for H series ?
Thanks
You need tun.ko from this post, libs from first posts and bin from this post. One additional feature is that you don't have to use ntp, as this openvpn ignores time
Looks on H with this openvpn you need to run one more command before starting:
Code: Select all
openvpn --dev-node /dtv/net/tun --mktun --dev tun0
This will create tun0 network interface then you simply launch openvpn with:
Code: Select all
--dev-node /dtv/net/tun --dev tun0
Or simply add to your conf file this: