- NEW: Added OpenSSL 1.1.1b in parallel to 1.0.2. Some services like AiCloud are still linked against 1.0.2 because they would require Asus to recompile them against 1.1.1.
Main services that currently use OpenSSL 1.1.1: httpd (webui), OpenVPN, wget, net-snmp, Tor, Strongswan (IPSEC server), inadyn, vsftpd, avahi.
Models that lack AES acceleration will prioritize the use of CHACHA20 over AES-256-GCM, for a small performance improvement (for instance with the webui).
Note that OpenVPN 2.4.7's support is still limited. TLS 1.3 is supported, but CHACHA20 support is only expected with OpenVPN 2.5.0.
The 1.0.2 userspace tool is still named "openssl", while the 1.1.x version is named "openssl11".
- NEW: Updated RT-AX88U to GPL 384_5640.
- NEW: Implemented lcp-ident option in PPP (required by some ISPs) (Themiron).
- NEW: Added NFSv2 support to HND models.
- NEW: You can now choose between having your router do internal DNS queries locally (through dnsmasq) or with your WAN configured DNS (like stock firmware). This does not affect DNS lookups from your clients, only those made by the router itself. The option is under Tools -> Other Settings. (Themiron)
- CHANGED: Some firmware cleanups to regain flash space (for use with the parallel OpenSSL 1.1.x install) (RMerlin, Themiron)
- CHANGED: Updated curl to 7.64.0.
- CHANGED: Updated OpenVPN to 2.4.7.
- CHANGED: Updated Tor to 0.3.5.8.
- CHANGED: Updated strongswan to 5.7.2.
- CHANGED: Updated OpenSSL 1.0.x to 1.0.2r.
- CHANGED: Updated dnsmasq to 2.80-44-g608aa9f (Themiron)
- CHANGED: Re-worked the Classification page. New design is much faster, allows filtering, and shows additional info when hovering on a field. Thanks to FreshJr for giving me the motivation to spend more time on it.
- CHANGED: Strongswan is no longer compiled 64-bit on HND, allowing it to use a shared openssl library instead of a static one. This should significantly reduce the memory and flash usage of Strongswan. (Themiron)
- CHANGED: Reworked DNS WAN probe implementation (Themiron)
- FIXED: IPSEC log display wasn't properly formatted (showed entirely on a single line)
- FIXED: Compatibility issues between recent Tuxera NTFS driver and Samba
- FIXED: NFSv2 support
- FIXED: PPP host-uniq support (Themiron)
- FIXED: AiCloud not working on the RT-AX88U
- FIXED: OpenVPN key/certs would sometime end up in nvram in addition to in /jffs
- FIXED: Couldn't remove an existing OpenVPN key/cert by clearing the field on the webui
- FIXED: Resetting OpenVPN client to Default values wasn't removing any existing Extra CA certificate
- REMOVED: Beceem Wimax driver. This is deprecated, and was already removed from the HND models. This allows to reclaim close to 2 MB of flash space.
- REMOVED: CFB and OFB ciphers from OpenVPN client