Re: [OpenWrt-Devel] Removing Telnet

2015-09-08 Thread Steven Barth
Hello Michael, that is interesting, though I guess since these are mainly our default it shouldn't be too hard for someone manufacturing to change the config and readd a simple init-script for telnetd if that is really required. Lack of entropy doesn't seem to be too much of an issue here, in fac

[OpenWrt-Devel] [PATCH] ar71xx: fix ar724x clock calculation

2015-09-08 Thread Weijie Gao
Signed-off-by: Weijie Gao According to the AR7242 datasheet section 2.8, AR724X CPUs use a 40MHz input clock as the REF_CLK instead of 5MHz. The correct CPU PLL calculation procedure is as follows: CPU_PLL = (DIV * REF_CLK) / REF_DIV / 2. This patch is compatible with the current calculation pr

Re: [OpenWrt-Devel] Removing Telnet

2015-09-08 Thread Vittorio G (VittGam)
Il 08.09.2015 21:31 Michael Heimpold ha scritto: I also remember that "long time ago" there were issues because of not enough entropy available on embedded devices. Is this still an issue? Should only delay the time when logging in is possible, right? The dropbearkey key generation will delay d

Re: [OpenWrt-Devel] Removing Telnet

2015-09-08 Thread Michael Heimpold
Am Dienstag, 8. September 2015, 10:15:52 schrieb Steven Barth: > Hello everyone, > > as of https://dev.openwrt.org/changeset/46809 telnet is no longer part of > the base images. As a replacement, it is now possible to login to the root- > account via SSH without a password prompt whenever no root

[OpenWrt-Devel] [PATCH] [SIGNED-OFF] Add initial support for WeIO board

2015-09-08 Thread Drasko DRASKOVIC
Add support for WeIO board (http://we-io.net), which is based on Carambola2 board from 8Devices. Signed-off-by: Drasko DRASKOVIC --- target/linux/ar71xx/base-files/lib/ar71xx.sh | 3 + .../ar71xx/base-files/lib/upgrade/platform.sh | 3 +- target/linux/ar71xx/config-4.1

Re: [OpenWrt-Devel] [PATCH] [SIGNED-OFF] Add WeIO board (http://we-io.net) profile. This patch adds support for WeIO board, which is based on Carambola2 board from 8Devices.

2015-09-08 Thread Drasko DRASKOVIC
On Tue, Sep 8, 2015 at 8:07 PM, Drasko DRASKOVIC wrote: > Hi Karl, > corrected patch re-sent. > > My comments below. > > BR, > Drasko > > On Sat, Aug 8, 2015 at 3:03 AM, Karl Palsson wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> Comments inline... >> >> Drasko DRASKOVIC wrote:

Re: [OpenWrt-Devel] Removing Telnet

2015-09-08 Thread Jonathan Bennett
Nak on setting a default password. The blank password has served its purpose well for years now. Any preset password is asking for users to leave it default. The only problem with blank ssh logins is it removes one of the ways openwrt encouraged the user to set a password. A banner that warns abou

Re: [OpenWrt-Devel] Removing Telnet

2015-09-08 Thread Vittorio G (VittGam)
Il 08.09.2015 20:34 Vittorio G (VittGam) ha scritto: Maybe it would just be better to set the default root password to 'openwrt' or 'insecure' or 'change_me!'? Maybe along with a preauthentication banner that tells the user about the default password and the fact that it should be changed as so

Re: [OpenWrt-Devel] Removing Telnet

2015-09-08 Thread Vittorio G (VittGam)
Il 08.09.2015 10:15 Steven Barth ha scritto: as of https://dev.openwrt.org/changeset/46809 telnet is no longer part of the base images. As a replacement, it is now possible to login to the root- account via SSH without a password prompt whenever no root password is set, e.g. after a flash without

Re: [OpenWrt-Devel] Fwd: Removing Telnet

2015-09-08 Thread Vittorio G (VittGam)
Il 08.09.2015 20:06 Sami Olmari ha scritto: Does Dropbeard support ether? I know OpenSSH does, but default installation does not use that. I just checked the changelog[1] and I remembered wrong about chacha20. But it does support curve25519 indeed; it was added along ECDSA: 2013.61test - Thur

[OpenWrt-Devel] [PATCH] lantiq: Update to the latest DSL driver / application versions

2015-09-08 Thread Martin Blumenstingl
Thanks to Sylwester Petela for testing my patch (successfully on an ADSL connection) and for pointing out some configuration mistakes. Others (including me) have also successfully tested this extensively on VDSL connections. Signed-off-by: Martin Blumenstingl --- package/kernel/lantiq/ltq-ifxos/

Re: [OpenWrt-Devel] [PATCH] [SIGNED-OFF] Add WeIO board (http://we-io.net) profile. This patch adds support for WeIO board, which is based on Carambola2 board from 8Devices.

2015-09-08 Thread Drasko DRASKOVIC
Hi Karl, corrected patch re-sent. My comments below. BR, Drasko On Sat, Aug 8, 2015 at 3:03 AM, Karl Palsson wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Comments inline... > > Drasko DRASKOVIC wrote: >> Signed-off-by: Drasko DRASKOVIC >> --- > > > Might just be my mail client

Re: [OpenWrt-Devel] Fwd: Removing Telnet

2015-09-08 Thread Sami Olmari
Does Dropbeard support ether? I know OpenSSH does, but default installation does not use that. Olmari On Sep 8, 2015 21:01, "Vittorio G (VittGam)" wrote: > Il 08.09.2015 18:31 Janusz Dziemidowicz ha scritto: > >> SSH time can be greatly reduced by using ECDSA host key. Dropbear can >> be compile

Re: [OpenWrt-Devel] Fwd: Removing Telnet

2015-09-08 Thread Vittorio G (VittGam)
Il 08.09.2015 18:31 Janusz Dziemidowicz ha scritto: SSH time can be greatly reduced by using ECDSA host key. Dropbear can be compiled with ECDSA support, however: - it is disabled by default in OpenWRT - startup script only generates RSA/DSA host keys, ECDSA host key must be generated manually U

[OpenWrt-Devel] [PATCH] [SIGNED-OFF] Add WeIO board (http://we-io.net) profile. This patch adds support for WeIO board, which is based on Carambola2 board from 8Devices.

2015-09-08 Thread Drasko DRASKOVIC
Signed-off-by: Drasko DRASKOVIC --- target/linux/ar71xx/base-files/lib/ar71xx.sh | 3 + .../ar71xx/base-files/lib/upgrade/platform.sh | 3 +- target/linux/ar71xx/config-4.1 | 1 + .../linux/ar71xx/files/arch/mips/ath79/mach-weio.c | 145 +

[OpenWrt-Devel] [PATCH] lantiq: Use the BAR0 base address in the ath PCI fixup code

2015-09-08 Thread Martin Blumenstingl
Fixes support for AR9287 on TP-Link TD-W8980 and possibly other devices which have an ath wifi chip at a PCI address other than 0xb800 (TD-W8980 for example has it's wifi chip at 0xbc00). Signed-off-by: Geoffrey McRae Signed-off-by: Martin Blumenstingl --- This patch was initially writte

Re: [OpenWrt-Devel] Fwd: Removing Telnet

2015-09-08 Thread Janusz Dziemidowicz
2015-09-08 18:00 GMT+02:00 Vittorio G (VittGam) : > Il 08.09.2015 17:42 Brent Thomson ha scritto: >> >> Slowness probably depends on hardware as well as all the possibilities >> listed by others. I have a model of router that always takes 2-3 >> seconds to initiate an SSH connection, just to set up

Re: [OpenWrt-Devel] Fwd: Removing Telnet

2015-09-08 Thread Jakub Jančo
Vittorio is right. Some seconds I got with disabling testing all my public keys. I tried add dns to /etc/hosts, but no gain. It waits where Vittorio wrote. I searched for disabling ciphers but didnt found anything. Probably it cannot be done. -- S pozdravom Jakub Janco 2015-09-08 18:00 GMT+02:0

[OpenWrt-Devel] [PATCH] comgt-ncm: Add possibility to choose PDP context type

2015-09-08 Thread Matti Laakso
By setting the option pdptype to IP, IPV6 or IPV4V6 the user can choose the context type between IPv4, IPv6 and dual stack, respectively. The default setting is dual stack, except if option ipv6=0 is specified, in which case IPv4 context is the default. This allows for an out-of-the-box IPv6 suppor

Re: [OpenWrt-Devel] [PATCH] openwrt/hardening: Fix CFLAGS usage for -D_FORTIFY_SOURCE

2015-09-08 Thread Karl Palsson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Helmut Schaa wrote: > On Tue, Sep 8, 2015 at 9:03 AM, Stefan Peter > wrote: > > Hi > > Am 07.09.2015 um 17:32 schrieb Helmut Schaa: > >> Fix the following configure error with c-ares by using CPPFLAGS for > >> -D_FORTIFY_SOURCE. > >> Not sure if any

Re: [OpenWrt-Devel] Fwd: Removing Telnet

2015-09-08 Thread Vittorio G (VittGam)
Il 08.09.2015 17:42 Brent Thomson ha scritto: Slowness probably depends on hardware as well as all the possibilities listed by others. I have a model of router that always takes 2-3 seconds to initiate an SSH connection, just to set up encryption (brief, but computationally intensive; happens wit

[OpenWrt-Devel] [PATCH] uqmi: Add proper IPv6 support

2015-09-08 Thread Matti Laakso
Use the new --ip-family option to start both IPv4 and IPv6 sessions by default. Autoconnect can't be used when starting two sessions, so revert back to using the client IDs and packet data handles for handling the network connection. Some modem firmwares do not implement a RA server, therefore by

Re: [OpenWrt-Devel] Fwd: Removing Telnet

2015-09-08 Thread Brent Thomson
On Tue, Sep 8, 2015 at 7:47 AM, RB wrote: > Experience with SSH breakage tells me that kind of slowness might be > due to the SSHD attempting to use DNS to check the origin system > (OpenSSH's UseDNS flag). It's been a while since I dug into the > OpenWRT SSH config, but is it generating the SSH

Re: [OpenWrt-Devel] [PATCH] Restore 640-bridge_no_eap_forward.patch to its original form

2015-09-08 Thread Felix Fietkau
On 2015-09-08 14:31, Dmitry Ivanov wrote: > Restore 640-bridge_no_eap_forward.patch to its original form. > It was corrupted in rev 62a2176cb144. The most obvious symptom is repeated > messages like this: > > Tue Sep 8 08:25:18 2015 kern.warn kernel: [77141.972226] br-lan: received > packet on

Re: [OpenWrt-Devel] Fwd: Removing Telnet

2015-09-08 Thread RB
On Tue, Sep 8, 2015 at 4:13 AM, Jakub Jančo wrote: > Is slow login still present on ssh? > Because we had problem, that ssh login takes about 10seconds and > telnet is instant. It is difference if we do initial bulk setup for > more devices. Experience with SSH breakage tells me that kind of slow

Re: [OpenWrt-Devel] [PATCH] Restore 640-bridge_no_eap_forward.patch to its original form

2015-09-08 Thread Hannu Nyman
> Please state the svn revision and/or the commit subject in () to make > it easier to find the offending commit. The "offending commit" seems to be r38528 , the introduction of Linux 3.12. https://dev.openwrt.org/changeset/38528 https://dev.openwrt.org/changeset/38528#file55 http://git.openwr

[OpenWrt-Devel] QinQ on MT7530/MT7621

2015-09-08 Thread Sven Eckelmann
Hi, I was testing QinQ/stacked vlan/double vlan/doubletag on MT7621 and noticed that it didn't work. I see packets correctly send with the the stacked VLAN tag but the replies are never received by eth0. Setup = --

Re: [OpenWrt-Devel] [PATCH 3/3] linux: add support of Synopsys ARC boards

2015-09-08 Thread Jonas Gorski
Hi Alexey, On Fri, Sep 4, 2015 at 4:12 PM, Alexey Brodkin wrote: > Hi Jonas, > > On Fri, 2015-09-04 at 15:44 +0200, Jonas Gorski wrote: >> Hi, >> >> On Fri, Sep 4, 2015 at 1:24 PM, Alexey Brodkin >> wrote: >> > Hi Jonas, >> > >> > On Fri, 2015-09-04 at 13:01 +0200, Jonas Gorski wrote: >> > > On

Re: [OpenWrt-Devel] [PATCH] Restore 640-bridge_no_eap_forward.patch to its original form

2015-09-08 Thread Jonas Gorski
Hi, On Tue, Sep 8, 2015 at 2:31 PM, Dmitry Ivanov wrote: > Restore 640-bridge_no_eap_forward.patch to its original form. > It was corrupted in rev 62a2176cb144. The most obvious symptom is repeated > messages like this: Please state the svn revision and/or the commit subject in () to make it ea

[OpenWrt-Devel] [PATCH] Restore 640-bridge_no_eap_forward.patch to its original form

2015-09-08 Thread Dmitry Ivanov
Restore 640-bridge_no_eap_forward.patch to its original form. It was corrupted in rev 62a2176cb144. The most obvious symptom is repeated messages like this: Tue Sep 8 08:25:18 2015 kern.warn kernel: [77141.972226] br-lan: received packet on wlan0 with own address as source address Signed-off-b

[OpenWrt-Devel] Fwd: Removing Telnet

2015-09-08 Thread Jakub Jančo
Is slow login still present on ssh? Because we had problem, that ssh login takes about 10seconds and telnet is instant. It is difference if we do initial bulk setup for more devices. If I login to my pc, ssh login takes <1sec. Thanks for reply. -- S pozdravom Jakub Janco 2015-09-08 10:15 GMT+02

[OpenWrt-Devel] Removing Telnet

2015-09-08 Thread Steven Barth
Hello everyone, as of https://dev.openwrt.org/changeset/46809 telnet is no longer part of the base images. As a replacement, it is now possible to login to the root- account via SSH without a password prompt whenever no root password is set, e.g. after a flash without keeping config, factory reset

Re: [OpenWrt-Devel] [PATCH] openwrt/hardening: Fix CFLAGS usage for -D_FORTIFY_SOURCE

2015-09-08 Thread Helmut Schaa
On Tue, Sep 8, 2015 at 9:03 AM, Stefan Peter wrote: > Hi > Am 07.09.2015 um 17:32 schrieb Helmut Schaa: >> Fix the following configure error with c-ares by using CPPFLAGS for >> -D_FORTIFY_SOURCE. >> Not sure if any other packages suffer from the same issue. >> >> configure: using CFLAGS: -Os -pi

Re: [OpenWrt-Devel] [PATCH] openwrt/hardening: Fix CFLAGS usage for -D_FORTIFY_SOURCE

2015-09-08 Thread Helmut Schaa
On Mon, Sep 7, 2015 at 6:19 PM, Steven Barth wrote: > NAK. > Not many package build systems honors CPPFLAGS so this solution is > impractical, > since it effectively disables fortification for many of them. > > To my knowledge c-ares is the only package enforcing this kind of behavior > so it sho

Re: [OpenWrt-Devel] [PATCH] openwrt/hardening: Fix CFLAGS usage for -D_FORTIFY_SOURCE

2015-09-08 Thread Stefan Peter
Hi Am 07.09.2015 um 17:32 schrieb Helmut Schaa: > Fix the following configure error with c-ares by using CPPFLAGS for > -D_FORTIFY_SOURCE. > Not sure if any other packages suffer from the same issue. > > configure: using CFLAGS: -Os -pipe -march=74kc -fno-caller-saves > -mno-branch-likely -g3 -f