Stable: 386.01_2-gnuton1

Changes from the latest stable gnuton build (384.17_0-gnuton1):

• build: Added circleci config file
• build: updated tools/copy-prebuilt to support DSL-AC68U target
• build: fixed tools/copy-prebuilt script which was copying release/src/router/tuxera/ in the wrong dir
• Merged DSL-AC68U GPL 384.56087 prebuilds
• build: added DSL-AC68U configuration to src-rt make target
• build: fixed build when DUALWAN and DSL are enabled
• Cleaning up remov some 'false' files
• Merged asuswrt 384.56087 GPL to release/src/router/shared/sysdeps/
• Import release/src/router/shared/prebuild/DSL-AC68U/ from GPL asuswrt 384.56087
• create release for each tag type
• tools/copy-prebuilt copies DSL-N55U GPL router/www/sysdep files since they are needed by DSL-AC68U and maybe other DSL variants in the future
• ExtendedNo var is set during compilation when a commit is tagged
• Imported src/router/www/sysdep/DSL-N55U/www/ files from GPL 384.56087 since they are needed by DSL variants
• Merged latest upstream Merlin code
• Sanitize CIRCLE_TAG to be used as EXTEND_NO
• feature: Added let's encrypt to src-rt/target.mak for DSL-AC68U
• Rename CI workflow and ignore master
• Merging new changes imported from RT-AC88U branch
• Merge remote-tracking branch 'upstream/mainline' into dsl-ac68u
• spectrum: imported app for DSL routers from DSL-AC68U GPL 384.56087
• httpd: upstream web.c reverted back since RT GPL is ahead of DSL one
• httpd: Added back get_dnsprivacy_presets
• webui: banner logo link set to gnuton's github
• webui: enabled firmware update checks for gnuton's builds
• fwupdate: FIX new firmwares with alphabetically bigger extendedno are not correcly detected
• Merged asus merlin code
• Merge upstream tag '384.14-beta1-mainline' into dsl-ac68u
• buildfix: httpd/web.c has been checked out from tags/384.13-beta1-mainline
• buildfix: set_fw_path.cgi not available for DSL-AC68U as for RT
• buildfix: do not threat warning as errors for router
• dsl-ac68u: Prebuild imported from GPL_DSL-AC68U_3.0.0.4.384.81140
• Merged RMerl 384.14-beta2-mainline
• buildfix: Backported rc/prebuild/DSL-AC68U/tcode_brcm.o from RT-AC86U since wl_disband5grp symbol was required for building
• Merged in GPL_DSL-AC68U_3.0.0.4.384.81727-g7c23ae8 prebuilds
• Merge tag '384.14-beta3-mainline' into 384.14_beta3
• Merge tag '384.14-mainline' into 384.14
• getdns: provide explicit path to OpenSSL 1.1.1 (fixes regression fom GPL 81044 merge)
• rc: fail wanduck (and possibly other services) failing to start due to ate_mode check
• rstats: revert some of the 384_81044 changes in an attempt to resolve the traffic spikes
• rc: log if router is in manufacturing mode at wanduck launch
• Updated documentation
• rc: fix bad GPL merge
• rc: remove no longer required kludge for STP on HND models
• build: re-add cifs.ko module (lost with GPL 81044 merge)
• webui: hide _0 extendno from firmware versions returned by cfg_sync
• Updated documentation
• Merge tag '384.14_2-mainline' into dsl-ac68u-384.14_2-mainline
• dsl-ac68u: build: fix - picks latest previous tag in case of releases
• Merge tag '384.15-mainline' into dsl-ac68u-384.15
• Merge tag '384.16-mainline' into dsl-ac68u-384.16
• Merge tag '384.17-mainline' into dsl-ac68u-384.17
• curl: fix build recipe when generating configure
• getdns: fix building under Ubuntu 20.04 LTS
• libgpg-error: fix building with gawk 5.0 (backport from upstream)
• Merge pull request #1 from RMerl/master
• Release amtm 3.1.7
• Merge pull request #509 from decoderman/master
• Updated documentation
• dropbear: Fix ssh client connection with Chacha20-Poly1305
• Updated documentation
• Merge GPL + SDK 384_81846 (RT-AC86U)
• Merge RT-AC86U binary blobs from 384_81846
• webui: updates to the QoS Stats page.
• Merge RT-AC68U SDK + binary blobs from 385_20490 (identical code to 384_81846)
• Merge RT-AC5300 binary blobs from 384_81844
• Merge RT-AC3100 SDK + binary blobs from 385_20490
• ahs: add binary collections to ahs/asd/libasc
• rc: update pw_dec() call in openvpn code to the new definition
• webui: optimize draw_conntrack_table() by removing code related to unsupported tQoS mode; fix tQoS default category labeling"
• webui: fix JS syntax error from upstream's Wireless Log page
• Updated documentation
• webui: harmonize dhcp_staticlist length with upstream
• Fix Privacy disclosure Wiki link in README
• httpd: rework gencert.sh script responsible for generating web certificate
• cfg_mnt: update gencfgcert to match updated openssl.cnf config file
• rc: copy stored cert.crt when starting httpds
• httpd: re-implement persistent certificate storage (lost in commit cdfc71f)
• Disable AHS and ASD on all supported models
• webui: remove validator.hostname() to match upstream (and replace one existing use with validator.host_name())
• Merge pull request #525 from borzaka/patch-1
• dropbear: Fix ChaCha20 on 32-bit platforms
• busybox: updated a few options to match upstream settings
• openvpn: revert 81846 change which broke setting ovpn server state to RUNNING
• Update updown-client.sh
• Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)
• Merge pull request #530 from Xentrk/master
• ssl: update root certificates to June 3rd 2020
• Updated documentation
• Revert "Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)"
• flac: properly provide libogg path (fixes building on some environment)
• openvpn: remove obsolete configure options that no longer exist
• build: parallelize rc and wget building
• www: updated OUI database
• Updated documentation
• webui: fix sorting by DNS field on DHCP reservation table
• Merged GPL + SDK 384_81918 (minus lighttpd changes) for RT-AC86U
• httpd: don't rely on nvram and nvram-stored cert for saving, we already do so at generation time
• rc: add kludge to watchdog for pre-384_81918 SDK 6.37 binary blobs
• Updated documentation
• Updated documentation
• shared: added missing shared blobs for RT-AC3100
• dropbear: update to 2020.79
• Merged RT-AC5300 binary blobs from 384_81902
• lighttpd: merge updated components + code from 384_819xx
• Removed obsolete LE lighttpd instance
• openvpn: store empty field instead of 0.0.0.0 in policy rules
• Updated documentation
• nano: updated to 4.9.3
• Updated documentation
• Updated documentation
• Merged RT-AC88U binary blobs from 384_81919
• rc: revert RT-AC88U kludge in watchdog
• rc: eliminate log spam occuring every four seconds while testing RTK switch status
• rom: hardcode wget timeout value in firmware update check scripts
• dropbear: update to 2020.80
• dropbear: use common random source for ltm
• vpnc: add static routing and def. gateway control
• Revert "vpnc: add static routing and def. gateway control"
• Updated documentation
• Updated documentation
• Revert "Revert "vpnc: add static routing and def. gateway control""
• Updated documentation
• httpd: www: implement notification on low jffs space
• Updated documentation
• build: fix processor count for parallel building
• build: enable parallel building for curl
• build: enable parallel kernel building for SDK6/SDK7 models
• other: fix am_get_webui_page() returning new mount point before matching existing file
• other: optimize am_get_webui_page loop
• Merge pull request #558 from dave14305/patch-1
• webui: fixed typo on low JFFS notification
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• Merged GPL + binary blobs 384_81981 for RT-AC5300
• bwdpi: merged bwdpi components from 385_20630 firmware image for RT-AC68U
• rc: httpd: harmonize httpd/vsftpd cert storage handling with upstream
• Merged GPL + SDK 384_81992 from RT-AC86U
• httpd: only save certificate if self-generated
• webui: update cert info display to be in-line with httpd/rc changes from 7917e3b
• Updated documentation
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• rom: fix duplicate CA bundle, and keep the updated one
• httpd: don't set tlscrypt nvram when parsing tls-crypt from an imported ovpn, this is only used by Asus.
• libvpn: implement copy_ovpn_key()
• rc: improve handling of clock-sensitive services on first WAN up.
• Updated documentation
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• libvpn: fixed log message on OpenVPN start
• libvpn: remove some no longer used defines
• webui: warn user when enabling user/pass auth for an OpenVPN client without providing both
• openvpn: skip DNS redirection for clients using an empty source instead of 0.0.0.0 (the old way of denoting "any")
• shared: fixed bad ipt_account() merge
• webui: report openvpn client error code 7 as a config error, not key/cert
• openvpn: set nvram errno if there is a config error preventing start
• fix typo
• openvpn: second stage of rewrite/refactor; harmonize master with mainline code
• webui: fix incorrect input field validated when applying an OpenVPN client configuration
• libovpn: don't allow duplicate-cn while in non-exclusive config-dir mode
• libovpn: also reapply DNS and QOS firewall rules when re-applying firewall rules
• rc: ensure that if openvpn client failed to start, that the instance gets set into an error state
• rc: let openvpn down event handler update dnsmasq/resolv config
• libovpn: remove unused (and inaccurate) constants
• shared: remove vpn_debug nvram (no longer used)
• Updated documentation
• Merge pull request #568 from maghuro/patch-2
• openvpn: remove duplicate line
• webui: fix check for userauth being enabled on OpenVPN client page; separate check/focus for both fields
• dropbear: libtommath: enable fixed cutoffs as size-optimization
• dnsmasq: update to 2.82 (2.82-34-gb309cca-openssl)
• openvpn: third stage - replacement of up/down handlers with libovpn functions, and fixes.
• Updated documentation
• rc: fix bad merge in ovpn.c
• rc: use the correct WAN interface ...

Unstable: 386.01_2-gnuton0_beta4

Changes from the latest stable gnuton build (384.17_0-gnuton1):

• build: Added circleci config file
• build: updated tools/copy-prebuilt to support DSL-AC68U target
• build: fixed tools/copy-prebuilt script which was copying release/src/router/tuxera/ in the wrong dir
• Merged DSL-AC68U GPL 384.56087 prebuilds
• build: added DSL-AC68U configuration to src-rt make target
• build: fixed build when DUALWAN and DSL are enabled
• Cleaning up remov some 'false' files
• Merged asuswrt 384.56087 GPL to release/src/router/shared/sysdeps/
• Import release/src/router/shared/prebuild/DSL-AC68U/ from GPL asuswrt 384.56087
• create release for each tag type
• tools/copy-prebuilt copies DSL-N55U GPL router/www/sysdep files since they are needed by DSL-AC68U and maybe other DSL variants in the future
• ExtendedNo var is set during compilation when a commit is tagged
• Imported src/router/www/sysdep/DSL-N55U/www/ files from GPL 384.56087 since they are needed by DSL variants
• Merged latest upstream Merlin code
• Sanitize CIRCLE_TAG to be used as EXTEND_NO
• feature: Added let's encrypt to src-rt/target.mak for DSL-AC68U
• Rename CI workflow and ignore master
• Merging new changes imported from RT-AC88U branch
• Merge remote-tracking branch 'upstream/mainline' into dsl-ac68u
• spectrum: imported app for DSL routers from DSL-AC68U GPL 384.56087
• httpd: upstream web.c reverted back since RT GPL is ahead of DSL one
• httpd: Added back get_dnsprivacy_presets
• webui: banner logo link set to gnuton's github
• webui: enabled firmware update checks for gnuton's builds
• fwupdate: FIX new firmwares with alphabetically bigger extendedno are not correcly detected
• Merged asus merlin code
• Merge upstream tag '384.14-beta1-mainline' into dsl-ac68u
• buildfix: httpd/web.c has been checked out from tags/384.13-beta1-mainline
• buildfix: set_fw_path.cgi not available for DSL-AC68U as for RT
• buildfix: do not threat warning as errors for router
• dsl-ac68u: Prebuild imported from GPL_DSL-AC68U_3.0.0.4.384.81140
• Merged RMerl 384.14-beta2-mainline
• buildfix: Backported rc/prebuild/DSL-AC68U/tcode_brcm.o from RT-AC86U since wl_disband5grp symbol was required for building
• Merged in GPL_DSL-AC68U_3.0.0.4.384.81727-g7c23ae8 prebuilds
• Merge tag '384.14-beta3-mainline' into 384.14_beta3
• Merge tag '384.14-mainline' into 384.14
• getdns: provide explicit path to OpenSSL 1.1.1 (fixes regression fom GPL 81044 merge)
• rc: fail wanduck (and possibly other services) failing to start due to ate_mode check
• rstats: revert some of the 384_81044 changes in an attempt to resolve the traffic spikes
• rc: log if router is in manufacturing mode at wanduck launch
• Updated documentation
• rc: fix bad GPL merge
• rc: remove no longer required kludge for STP on HND models
• build: re-add cifs.ko module (lost with GPL 81044 merge)
• webui: hide _0 extendno from firmware versions returned by cfg_sync
• Updated documentation
• Merge tag '384.14_2-mainline' into dsl-ac68u-384.14_2-mainline
• dsl-ac68u: build: fix - picks latest previous tag in case of releases
• Merge tag '384.15-mainline' into dsl-ac68u-384.15
• Merge tag '384.16-mainline' into dsl-ac68u-384.16
• Merge tag '384.17-mainline' into dsl-ac68u-384.17
• curl: fix build recipe when generating configure
• getdns: fix building under Ubuntu 20.04 LTS
• libgpg-error: fix building with gawk 5.0 (backport from upstream)
• Merge pull request #1 from RMerl/master
• Release amtm 3.1.7
• Merge pull request #509 from decoderman/master
• Updated documentation
• dropbear: Fix ssh client connection with Chacha20-Poly1305
• Updated documentation
• Merge GPL + SDK 384_81846 (RT-AC86U)
• Merge RT-AC86U binary blobs from 384_81846
• webui: updates to the QoS Stats page.
• Merge RT-AC68U SDK + binary blobs from 385_20490 (identical code to 384_81846)
• Merge RT-AC5300 binary blobs from 384_81844
• Merge RT-AC3100 SDK + binary blobs from 385_20490
• ahs: add binary collections to ahs/asd/libasc
• rc: update pw_dec() call in openvpn code to the new definition
• webui: optimize draw_conntrack_table() by removing code related to unsupported tQoS mode; fix tQoS default category labeling"
• webui: fix JS syntax error from upstream's Wireless Log page
• Updated documentation
• webui: harmonize dhcp_staticlist length with upstream
• Fix Privacy disclosure Wiki link in README
• httpd: rework gencert.sh script responsible for generating web certificate
• cfg_mnt: update gencfgcert to match updated openssl.cnf config file
• rc: copy stored cert.crt when starting httpds
• httpd: re-implement persistent certificate storage (lost in commit cdfc71f)
• Disable AHS and ASD on all supported models
• webui: remove validator.hostname() to match upstream (and replace one existing use with validator.host_name())
• Merge pull request #525 from borzaka/patch-1
• dropbear: Fix ChaCha20 on 32-bit platforms
• busybox: updated a few options to match upstream settings
• openvpn: revert 81846 change which broke setting ovpn server state to RUNNING
• Update updown-client.sh
• Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)
• Merge pull request #530 from Xentrk/master
• ssl: update root certificates to June 3rd 2020
• Updated documentation
• Revert "Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)"
• flac: properly provide libogg path (fixes building on some environment)
• openvpn: remove obsolete configure options that no longer exist
• build: parallelize rc and wget building
• www: updated OUI database
• Updated documentation
• webui: fix sorting by DNS field on DHCP reservation table
• Merged GPL + SDK 384_81918 (minus lighttpd changes) for RT-AC86U
• httpd: don't rely on nvram and nvram-stored cert for saving, we already do so at generation time
• rc: add kludge to watchdog for pre-384_81918 SDK 6.37 binary blobs
• Updated documentation
• Updated documentation
• shared: added missing shared blobs for RT-AC3100
• dropbear: update to 2020.79
• Merged RT-AC5300 binary blobs from 384_81902
• lighttpd: merge updated components + code from 384_819xx
• Removed obsolete LE lighttpd instance
• openvpn: store empty field instead of 0.0.0.0 in policy rules
• Updated documentation
• nano: updated to 4.9.3
• Updated documentation
• Updated documentation
• Merged RT-AC88U binary blobs from 384_81919
• rc: revert RT-AC88U kludge in watchdog
• rc: eliminate log spam occuring every four seconds while testing RTK switch status
• rom: hardcode wget timeout value in firmware update check scripts
• dropbear: update to 2020.80
• dropbear: use common random source for ltm
• vpnc: add static routing and def. gateway control
• Revert "vpnc: add static routing and def. gateway control"
• Updated documentation
• Updated documentation
• Revert "Revert "vpnc: add static routing and def. gateway control""
• Updated documentation
• httpd: www: implement notification on low jffs space
• Updated documentation
• build: fix processor count for parallel building
• build: enable parallel building for curl
• build: enable parallel kernel building for SDK6/SDK7 models
• other: fix am_get_webui_page() returning new mount point before matching existing file
• other: optimize am_get_webui_page loop
• Merge pull request #558 from dave14305/patch-1
• webui: fixed typo on low JFFS notification
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• Merged GPL + binary blobs 384_81981 for RT-AC5300
• bwdpi: merged bwdpi components from 385_20630 firmware image for RT-AC68U
• rc: httpd: harmonize httpd/vsftpd cert storage handling with upstream
• Merged GPL + SDK 384_81992 from RT-AC86U
• httpd: only save certificate if self-generated
• webui: update cert info display to be in-line with httpd/rc changes from 7917e3b
• Updated documentation
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• rom: fix duplicate CA bundle, and keep the updated one
• httpd: don't set tlscrypt nvram when parsing tls-crypt from an imported ovpn, this is only used by Asus.
• libvpn: implement copy_ovpn_key()
• rc: improve handling of clock-sensitive services on first WAN up.
• Updated documentation
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• libvpn: fixed log message on OpenVPN start
• libvpn: remove some no longer used defines
• webui: warn user when enabling user/pass auth for an OpenVPN client without providing both
• openvpn: skip DNS redirection for clients using an empty source instead of 0.0.0.0 (the old way of denoting "any")
• shared: fixed bad ipt_account() merge
• webui: report openvpn client error code 7 as a config error, not key/cert
• openvpn: set nvram errno if there is a config error preventing start
• fix typo
• openvpn: second stage of rewrite/refactor; harmonize master with mainline code
• webui: fix incorrect input field validated when applying an OpenVPN client configuration
• libovpn: don't allow duplicate-cn while in non-exclusive config-dir mode
• libovpn: also reapply DNS and QOS firewall rules when re-applying firewall rules
• rc: ensure that if openvpn client failed to start, that the instance gets set into an error state
• rc: let openvpn down event handler update dnsmasq/resolv config
• libovpn: remove unused (and inaccurate) constants
• shared: remove vpn_debug nvram (no longer used)
• Updated documentation
• Merge pull request #568 from maghuro/patch-2
• openvpn: remove duplicate line
• webui: fix check for userauth being enabled on OpenVPN client page; separate check/focus for both fields
• dropbear: libtommath: enable fixed cutoffs as size-optimization
• dnsmasq: update to 2.82 (2.82-34-gb309cca-openssl)
• openvpn: third stage - replacement of up/down handlers with libovpn functions, and fixes.
• Updated documentation
• rc: fix bad merge in ovpn.c
• rc: use the correct WAN interface ...

Unstable: 386.01_2-gnuton0_beta3

Changes from the latest stable gnuton build (384.17_0-gnuton1):

• build: Added circleci config file
• build: updated tools/copy-prebuilt to support DSL-AC68U target
• build: fixed tools/copy-prebuilt script which was copying release/src/router/tuxera/ in the wrong dir
• Merged DSL-AC68U GPL 384.56087 prebuilds
• build: added DSL-AC68U configuration to src-rt make target
• build: fixed build when DUALWAN and DSL are enabled
• Cleaning up remov some 'false' files
• Merged asuswrt 384.56087 GPL to release/src/router/shared/sysdeps/
• Import release/src/router/shared/prebuild/DSL-AC68U/ from GPL asuswrt 384.56087
• create release for each tag type
• tools/copy-prebuilt copies DSL-N55U GPL router/www/sysdep files since they are needed by DSL-AC68U and maybe other DSL variants in the future
• ExtendedNo var is set during compilation when a commit is tagged
• Imported src/router/www/sysdep/DSL-N55U/www/ files from GPL 384.56087 since they are needed by DSL variants
• Merged latest upstream Merlin code
• Sanitize CIRCLE_TAG to be used as EXTEND_NO
• feature: Added let's encrypt to src-rt/target.mak for DSL-AC68U
• Rename CI workflow and ignore master
• Merging new changes imported from RT-AC88U branch
• Merge remote-tracking branch 'upstream/mainline' into dsl-ac68u
• spectrum: imported app for DSL routers from DSL-AC68U GPL 384.56087
• httpd: upstream web.c reverted back since RT GPL is ahead of DSL one
• httpd: Added back get_dnsprivacy_presets
• webui: banner logo link set to gnuton's github
• webui: enabled firmware update checks for gnuton's builds
• fwupdate: FIX new firmwares with alphabetically bigger extendedno are not correcly detected
• Merged asus merlin code
• Merge upstream tag '384.14-beta1-mainline' into dsl-ac68u
• buildfix: httpd/web.c has been checked out from tags/384.13-beta1-mainline
• buildfix: set_fw_path.cgi not available for DSL-AC68U as for RT
• buildfix: do not threat warning as errors for router
• dsl-ac68u: Prebuild imported from GPL_DSL-AC68U_3.0.0.4.384.81140
• Merged RMerl 384.14-beta2-mainline
• buildfix: Backported rc/prebuild/DSL-AC68U/tcode_brcm.o from RT-AC86U since wl_disband5grp symbol was required for building
• Merged in GPL_DSL-AC68U_3.0.0.4.384.81727-g7c23ae8 prebuilds
• Merge tag '384.14-beta3-mainline' into 384.14_beta3
• Merge tag '384.14-mainline' into 384.14
• getdns: provide explicit path to OpenSSL 1.1.1 (fixes regression fom GPL 81044 merge)
• rc: fail wanduck (and possibly other services) failing to start due to ate_mode check
• rstats: revert some of the 384_81044 changes in an attempt to resolve the traffic spikes
• rc: log if router is in manufacturing mode at wanduck launch
• Updated documentation
• rc: fix bad GPL merge
• rc: remove no longer required kludge for STP on HND models
• build: re-add cifs.ko module (lost with GPL 81044 merge)
• webui: hide _0 extendno from firmware versions returned by cfg_sync
• Updated documentation
• Merge tag '384.14_2-mainline' into dsl-ac68u-384.14_2-mainline
• dsl-ac68u: build: fix - picks latest previous tag in case of releases
• Merge tag '384.15-mainline' into dsl-ac68u-384.15
• Merge tag '384.16-mainline' into dsl-ac68u-384.16
• Merge tag '384.17-mainline' into dsl-ac68u-384.17
• curl: fix build recipe when generating configure
• getdns: fix building under Ubuntu 20.04 LTS
• libgpg-error: fix building with gawk 5.0 (backport from upstream)
• Merge pull request #1 from RMerl/master
• Release amtm 3.1.7
• Merge pull request #509 from decoderman/master
• Updated documentation
• dropbear: Fix ssh client connection with Chacha20-Poly1305
• Updated documentation
• Merge GPL + SDK 384_81846 (RT-AC86U)
• Merge RT-AC86U binary blobs from 384_81846
• webui: updates to the QoS Stats page.
• Merge RT-AC68U SDK + binary blobs from 385_20490 (identical code to 384_81846)
• Merge RT-AC5300 binary blobs from 384_81844
• Merge RT-AC3100 SDK + binary blobs from 385_20490
• ahs: add binary collections to ahs/asd/libasc
• rc: update pw_dec() call in openvpn code to the new definition
• webui: optimize draw_conntrack_table() by removing code related to unsupported tQoS mode; fix tQoS default category labeling"
• webui: fix JS syntax error from upstream's Wireless Log page
• Updated documentation
• webui: harmonize dhcp_staticlist length with upstream
• Fix Privacy disclosure Wiki link in README
• httpd: rework gencert.sh script responsible for generating web certificate
• cfg_mnt: update gencfgcert to match updated openssl.cnf config file
• rc: copy stored cert.crt when starting httpds
• httpd: re-implement persistent certificate storage (lost in commit cdfc71f)
• Disable AHS and ASD on all supported models
• webui: remove validator.hostname() to match upstream (and replace one existing use with validator.host_name())
• Merge pull request #525 from borzaka/patch-1
• dropbear: Fix ChaCha20 on 32-bit platforms
• busybox: updated a few options to match upstream settings
• openvpn: revert 81846 change which broke setting ovpn server state to RUNNING
• Update updown-client.sh
• Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)
• Merge pull request #530 from Xentrk/master
• ssl: update root certificates to June 3rd 2020
• Updated documentation
• Revert "Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)"
• flac: properly provide libogg path (fixes building on some environment)
• openvpn: remove obsolete configure options that no longer exist
• build: parallelize rc and wget building
• www: updated OUI database
• Updated documentation
• webui: fix sorting by DNS field on DHCP reservation table
• Merged GPL + SDK 384_81918 (minus lighttpd changes) for RT-AC86U
• httpd: don't rely on nvram and nvram-stored cert for saving, we already do so at generation time
• rc: add kludge to watchdog for pre-384_81918 SDK 6.37 binary blobs
• Updated documentation
• Updated documentation
• shared: added missing shared blobs for RT-AC3100
• dropbear: update to 2020.79
• Merged RT-AC5300 binary blobs from 384_81902
• lighttpd: merge updated components + code from 384_819xx
• Removed obsolete LE lighttpd instance
• openvpn: store empty field instead of 0.0.0.0 in policy rules
• Updated documentation
• nano: updated to 4.9.3
• Updated documentation
• Updated documentation
• Merged RT-AC88U binary blobs from 384_81919
• rc: revert RT-AC88U kludge in watchdog
• rc: eliminate log spam occuring every four seconds while testing RTK switch status
• rom: hardcode wget timeout value in firmware update check scripts
• dropbear: update to 2020.80
• dropbear: use common random source for ltm
• vpnc: add static routing and def. gateway control
• Revert "vpnc: add static routing and def. gateway control"
• Updated documentation
• Updated documentation
• Revert "Revert "vpnc: add static routing and def. gateway control""
• Updated documentation
• httpd: www: implement notification on low jffs space
• Updated documentation
• build: fix processor count for parallel building
• build: enable parallel building for curl
• build: enable parallel kernel building for SDK6/SDK7 models
• other: fix am_get_webui_page() returning new mount point before matching existing file
• other: optimize am_get_webui_page loop
• Merge pull request #558 from dave14305/patch-1
• webui: fixed typo on low JFFS notification
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• Merged GPL + binary blobs 384_81981 for RT-AC5300
• bwdpi: merged bwdpi components from 385_20630 firmware image for RT-AC68U
• rc: httpd: harmonize httpd/vsftpd cert storage handling with upstream
• Merged GPL + SDK 384_81992 from RT-AC86U
• httpd: only save certificate if self-generated
• webui: update cert info display to be in-line with httpd/rc changes from 7917e3b
• Updated documentation
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• rom: fix duplicate CA bundle, and keep the updated one
• httpd: don't set tlscrypt nvram when parsing tls-crypt from an imported ovpn, this is only used by Asus.
• libvpn: implement copy_ovpn_key()
• rc: improve handling of clock-sensitive services on first WAN up.
• Updated documentation
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• libvpn: fixed log message on OpenVPN start
• libvpn: remove some no longer used defines
• webui: warn user when enabling user/pass auth for an OpenVPN client without providing both
• openvpn: skip DNS redirection for clients using an empty source instead of 0.0.0.0 (the old way of denoting "any")
• shared: fixed bad ipt_account() merge
• webui: report openvpn client error code 7 as a config error, not key/cert
• openvpn: set nvram errno if there is a config error preventing start
• fix typo
• openvpn: second stage of rewrite/refactor; harmonize master with mainline code
• webui: fix incorrect input field validated when applying an OpenVPN client configuration
• libovpn: don't allow duplicate-cn while in non-exclusive config-dir mode
• libovpn: also reapply DNS and QOS firewall rules when re-applying firewall rules
• rc: ensure that if openvpn client failed to start, that the instance gets set into an error state
• rc: let openvpn down event handler update dnsmasq/resolv config
• libovpn: remove unused (and inaccurate) constants
• shared: remove vpn_debug nvram (no longer used)
• Updated documentation
• Merge pull request #568 from maghuro/patch-2
• openvpn: remove duplicate line
• webui: fix check for userauth being enabled on OpenVPN client page; separate check/focus for both fields
• dropbear: libtommath: enable fixed cutoffs as size-optimization
• dnsmasq: update to 2.82 (2.82-34-gb309cca-openssl)
• openvpn: third stage - replacement of up/down handlers with libovpn functions, and fixes.
• Updated documentation
• rc: fix bad merge in ovpn.c
• rc: use the correct WAN interface ...

Unstable: 386.01_2-gnuton0_beta2

Changes from the latest stable gnuton build (384.17_0-gnuton1):

• build: Added circleci config file
• build: updated tools/copy-prebuilt to support DSL-AC68U target
• build: fixed tools/copy-prebuilt script which was copying release/src/router/tuxera/ in the wrong dir
• Merged DSL-AC68U GPL 384.56087 prebuilds
• build: added DSL-AC68U configuration to src-rt make target
• build: fixed build when DUALWAN and DSL are enabled
• Cleaning up remov some 'false' files
• Merged asuswrt 384.56087 GPL to release/src/router/shared/sysdeps/
• Import release/src/router/shared/prebuild/DSL-AC68U/ from GPL asuswrt 384.56087
• create release for each tag type
• tools/copy-prebuilt copies DSL-N55U GPL router/www/sysdep files since they are needed by DSL-AC68U and maybe other DSL variants in the future
• ExtendedNo var is set during compilation when a commit is tagged
• Imported src/router/www/sysdep/DSL-N55U/www/ files from GPL 384.56087 since they are needed by DSL variants
• Merged latest upstream Merlin code
• Sanitize CIRCLE_TAG to be used as EXTEND_NO
• feature: Added let's encrypt to src-rt/target.mak for DSL-AC68U
• Rename CI workflow and ignore master
• Merging new changes imported from RT-AC88U branch
• Merge remote-tracking branch 'upstream/mainline' into dsl-ac68u
• spectrum: imported app for DSL routers from DSL-AC68U GPL 384.56087
• httpd: upstream web.c reverted back since RT GPL is ahead of DSL one
• httpd: Added back get_dnsprivacy_presets
• webui: banner logo link set to gnuton's github
• webui: enabled firmware update checks for gnuton's builds
• fwupdate: FIX new firmwares with alphabetically bigger extendedno are not correcly detected
• Merged asus merlin code
• Merge upstream tag '384.14-beta1-mainline' into dsl-ac68u
• buildfix: httpd/web.c has been checked out from tags/384.13-beta1-mainline
• buildfix: set_fw_path.cgi not available for DSL-AC68U as for RT
• buildfix: do not threat warning as errors for router
• dsl-ac68u: Prebuild imported from GPL_DSL-AC68U_3.0.0.4.384.81140
• Merged RMerl 384.14-beta2-mainline
• buildfix: Backported rc/prebuild/DSL-AC68U/tcode_brcm.o from RT-AC86U since wl_disband5grp symbol was required for building
• Merged in GPL_DSL-AC68U_3.0.0.4.384.81727-g7c23ae8 prebuilds
• Merge tag '384.14-beta3-mainline' into 384.14_beta3
• Merge tag '384.14-mainline' into 384.14
• getdns: provide explicit path to OpenSSL 1.1.1 (fixes regression fom GPL 81044 merge)
• rc: fail wanduck (and possibly other services) failing to start due to ate_mode check
• rstats: revert some of the 384_81044 changes in an attempt to resolve the traffic spikes
• rc: log if router is in manufacturing mode at wanduck launch
• Updated documentation
• rc: fix bad GPL merge
• rc: remove no longer required kludge for STP on HND models
• build: re-add cifs.ko module (lost with GPL 81044 merge)
• webui: hide _0 extendno from firmware versions returned by cfg_sync
• Updated documentation
• Merge tag '384.14_2-mainline' into dsl-ac68u-384.14_2-mainline
• dsl-ac68u: build: fix - picks latest previous tag in case of releases
• Merge tag '384.15-mainline' into dsl-ac68u-384.15
• Merge tag '384.16-mainline' into dsl-ac68u-384.16
• Merge tag '384.17-mainline' into dsl-ac68u-384.17
• curl: fix build recipe when generating configure
• getdns: fix building under Ubuntu 20.04 LTS
• libgpg-error: fix building with gawk 5.0 (backport from upstream)
• Merge pull request #1 from RMerl/master
• Release amtm 3.1.7
• Merge pull request #509 from decoderman/master
• Updated documentation
• dropbear: Fix ssh client connection with Chacha20-Poly1305
• Updated documentation
• Merge GPL + SDK 384_81846 (RT-AC86U)
• Merge RT-AC86U binary blobs from 384_81846
• webui: updates to the QoS Stats page.
• Merge RT-AC68U SDK + binary blobs from 385_20490 (identical code to 384_81846)
• Merge RT-AC5300 binary blobs from 384_81844
• Merge RT-AC3100 SDK + binary blobs from 385_20490
• ahs: add binary collections to ahs/asd/libasc
• rc: update pw_dec() call in openvpn code to the new definition
• webui: optimize draw_conntrack_table() by removing code related to unsupported tQoS mode; fix tQoS default category labeling"
• webui: fix JS syntax error from upstream's Wireless Log page
• Updated documentation
• webui: harmonize dhcp_staticlist length with upstream
• Fix Privacy disclosure Wiki link in README
• httpd: rework gencert.sh script responsible for generating web certificate
• cfg_mnt: update gencfgcert to match updated openssl.cnf config file
• rc: copy stored cert.crt when starting httpds
• httpd: re-implement persistent certificate storage (lost in commit cdfc71f)
• Disable AHS and ASD on all supported models
• webui: remove validator.hostname() to match upstream (and replace one existing use with validator.host_name())
• Merge pull request #525 from borzaka/patch-1
• dropbear: Fix ChaCha20 on 32-bit platforms
• busybox: updated a few options to match upstream settings
• openvpn: revert 81846 change which broke setting ovpn server state to RUNNING
• Update updown-client.sh
• Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)
• Merge pull request #530 from Xentrk/master
• ssl: update root certificates to June 3rd 2020
• Updated documentation
• Revert "Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)"
• flac: properly provide libogg path (fixes building on some environment)
• openvpn: remove obsolete configure options that no longer exist
• build: parallelize rc and wget building
• www: updated OUI database
• Updated documentation
• webui: fix sorting by DNS field on DHCP reservation table
• Merged GPL + SDK 384_81918 (minus lighttpd changes) for RT-AC86U
• httpd: don't rely on nvram and nvram-stored cert for saving, we already do so at generation time
• rc: add kludge to watchdog for pre-384_81918 SDK 6.37 binary blobs
• Updated documentation
• Updated documentation
• shared: added missing shared blobs for RT-AC3100
• dropbear: update to 2020.79
• Merged RT-AC5300 binary blobs from 384_81902
• lighttpd: merge updated components + code from 384_819xx
• Removed obsolete LE lighttpd instance
• openvpn: store empty field instead of 0.0.0.0 in policy rules
• Updated documentation
• nano: updated to 4.9.3
• Updated documentation
• Updated documentation
• Merged RT-AC88U binary blobs from 384_81919
• rc: revert RT-AC88U kludge in watchdog
• rc: eliminate log spam occuring every four seconds while testing RTK switch status
• rom: hardcode wget timeout value in firmware update check scripts
• dropbear: update to 2020.80
• dropbear: use common random source for ltm
• vpnc: add static routing and def. gateway control
• Revert "vpnc: add static routing and def. gateway control"
• Updated documentation
• Updated documentation
• Revert "Revert "vpnc: add static routing and def. gateway control""
• Updated documentation
• httpd: www: implement notification on low jffs space
• Updated documentation
• build: fix processor count for parallel building
• build: enable parallel building for curl
• build: enable parallel kernel building for SDK6/SDK7 models
• other: fix am_get_webui_page() returning new mount point before matching existing file
• other: optimize am_get_webui_page loop
• Merge pull request #558 from dave14305/patch-1
• webui: fixed typo on low JFFS notification
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• Merged GPL + binary blobs 384_81981 for RT-AC5300
• bwdpi: merged bwdpi components from 385_20630 firmware image for RT-AC68U
• rc: httpd: harmonize httpd/vsftpd cert storage handling with upstream
• Merged GPL + SDK 384_81992 from RT-AC86U
• httpd: only save certificate if self-generated
• webui: update cert info display to be in-line with httpd/rc changes from 7917e3b
• Updated documentation
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• rom: fix duplicate CA bundle, and keep the updated one
• httpd: don't set tlscrypt nvram when parsing tls-crypt from an imported ovpn, this is only used by Asus.
• libvpn: implement copy_ovpn_key()
• rc: improve handling of clock-sensitive services on first WAN up.
• Updated documentation
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• libvpn: fixed log message on OpenVPN start
• libvpn: remove some no longer used defines
• webui: warn user when enabling user/pass auth for an OpenVPN client without providing both
• openvpn: skip DNS redirection for clients using an empty source instead of 0.0.0.0 (the old way of denoting "any")
• shared: fixed bad ipt_account() merge
• webui: report openvpn client error code 7 as a config error, not key/cert
• openvpn: set nvram errno if there is a config error preventing start
• fix typo
• openvpn: second stage of rewrite/refactor; harmonize master with mainline code
• webui: fix incorrect input field validated when applying an OpenVPN client configuration
• libovpn: don't allow duplicate-cn while in non-exclusive config-dir mode
• libovpn: also reapply DNS and QOS firewall rules when re-applying firewall rules
• rc: ensure that if openvpn client failed to start, that the instance gets set into an error state
• rc: let openvpn down event handler update dnsmasq/resolv config
• libovpn: remove unused (and inaccurate) constants
• shared: remove vpn_debug nvram (no longer used)
• Updated documentation
• Merge pull request #568 from maghuro/patch-2
• openvpn: remove duplicate line
• webui: fix check for userauth being enabled on OpenVPN client page; separate check/focus for both fields
• dropbear: libtommath: enable fixed cutoffs as size-optimization
• dnsmasq: update to 2.82 (2.82-34-gb309cca-openssl)
• openvpn: third stage - replacement of up/down handlers with libovpn functions, and fixes.
• Updated documentation
• rc: fix bad merge in ovpn.c
• rc: use the correct WAN interface ...

Unstable: 386.01_0-gnuton0_beta1

Changes from the latest stable gnuton build (384.17_0-gnuton1):

• build: Added circleci config file
• build: updated tools/copy-prebuilt to support DSL-AC68U target
• build: fixed tools/copy-prebuilt script which was copying release/src/router/tuxera/ in the wrong dir
• Merged DSL-AC68U GPL 384.56087 prebuilds
• build: added DSL-AC68U configuration to src-rt make target
• build: fixed build when DUALWAN and DSL are enabled
• Cleaning up remov some 'false' files
• Merged asuswrt 384.56087 GPL to release/src/router/shared/sysdeps/
• Import release/src/router/shared/prebuild/DSL-AC68U/ from GPL asuswrt 384.56087
• create release for each tag type
• tools/copy-prebuilt copies DSL-N55U GPL router/www/sysdep files since they are needed by DSL-AC68U and maybe other DSL variants in the future
• ExtendedNo var is set during compilation when a commit is tagged
• Imported src/router/www/sysdep/DSL-N55U/www/ files from GPL 384.56087 since they are needed by DSL variants
• Merged latest upstream Merlin code
• Sanitize CIRCLE_TAG to be used as EXTEND_NO
• feature: Added let's encrypt to src-rt/target.mak for DSL-AC68U
• Rename CI workflow and ignore master
• Merging new changes imported from RT-AC88U branch
• Merge remote-tracking branch 'upstream/mainline' into dsl-ac68u
• spectrum: imported app for DSL routers from DSL-AC68U GPL 384.56087
• httpd: upstream web.c reverted back since RT GPL is ahead of DSL one
• httpd: Added back get_dnsprivacy_presets
• webui: banner logo link set to gnuton's github
• webui: enabled firmware update checks for gnuton's builds
• fwupdate: FIX new firmwares with alphabetically bigger extendedno are not correcly detected
• Merged asus merlin code
• Merge upstream tag '384.14-beta1-mainline' into dsl-ac68u
• buildfix: httpd/web.c has been checked out from tags/384.13-beta1-mainline
• buildfix: set_fw_path.cgi not available for DSL-AC68U as for RT
• buildfix: do not threat warning as errors for router
• dsl-ac68u: Prebuild imported from GPL_DSL-AC68U_3.0.0.4.384.81140
• Merged RMerl 384.14-beta2-mainline
• buildfix: Backported rc/prebuild/DSL-AC68U/tcode_brcm.o from RT-AC86U since wl_disband5grp symbol was required for building
• Merged in GPL_DSL-AC68U_3.0.0.4.384.81727-g7c23ae8 prebuilds
• Merge tag '384.14-beta3-mainline' into 384.14_beta3
• Merge tag '384.14-mainline' into 384.14
• getdns: provide explicit path to OpenSSL 1.1.1 (fixes regression fom GPL 81044 merge)
• rc: fail wanduck (and possibly other services) failing to start due to ate_mode check
• rstats: revert some of the 384_81044 changes in an attempt to resolve the traffic spikes
• rc: log if router is in manufacturing mode at wanduck launch
• Updated documentation
• rc: fix bad GPL merge
• rc: remove no longer required kludge for STP on HND models
• build: re-add cifs.ko module (lost with GPL 81044 merge)
• webui: hide _0 extendno from firmware versions returned by cfg_sync
• Updated documentation
• Merge tag '384.14_2-mainline' into dsl-ac68u-384.14_2-mainline
• dsl-ac68u: build: fix - picks latest previous tag in case of releases
• Merge tag '384.15-mainline' into dsl-ac68u-384.15
• Merge tag '384.16-mainline' into dsl-ac68u-384.16
• Merge tag '384.17-mainline' into dsl-ac68u-384.17
• curl: fix build recipe when generating configure
• getdns: fix building under Ubuntu 20.04 LTS
• libgpg-error: fix building with gawk 5.0 (backport from upstream)
• Merge pull request #1 from RMerl/master
• Release amtm 3.1.7
• Merge pull request #509 from decoderman/master
• Updated documentation
• dropbear: Fix ssh client connection with Chacha20-Poly1305
• Updated documentation
• Merge GPL + SDK 384_81846 (RT-AC86U)
• Merge RT-AC86U binary blobs from 384_81846
• webui: updates to the QoS Stats page.
• Merge RT-AC68U SDK + binary blobs from 385_20490 (identical code to 384_81846)
• Merge RT-AC5300 binary blobs from 384_81844
• Merge RT-AC3100 SDK + binary blobs from 385_20490
• ahs: add binary collections to ahs/asd/libasc
• rc: update pw_dec() call in openvpn code to the new definition
• webui: optimize draw_conntrack_table() by removing code related to unsupported tQoS mode; fix tQoS default category labeling"
• webui: fix JS syntax error from upstream's Wireless Log page
• Updated documentation
• webui: harmonize dhcp_staticlist length with upstream
• Fix Privacy disclosure Wiki link in README
• httpd: rework gencert.sh script responsible for generating web certificate
• cfg_mnt: update gencfgcert to match updated openssl.cnf config file
• rc: copy stored cert.crt when starting httpds
• httpd: re-implement persistent certificate storage (lost in commit cdfc71f)
• Disable AHS and ASD on all supported models
• webui: remove validator.hostname() to match upstream (and replace one existing use with validator.host_name())
• Merge pull request #525 from borzaka/patch-1
• dropbear: Fix ChaCha20 on 32-bit platforms
• busybox: updated a few options to match upstream settings
• openvpn: revert 81846 change which broke setting ovpn server state to RUNNING
• Update updown-client.sh
• Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)
• Merge pull request #530 from Xentrk/master
• ssl: update root certificates to June 3rd 2020
• Updated documentation
• Revert "Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)"
• flac: properly provide libogg path (fixes building on some environment)
• openvpn: remove obsolete configure options that no longer exist
• build: parallelize rc and wget building
• www: updated OUI database
• Updated documentation
• webui: fix sorting by DNS field on DHCP reservation table
• Merged GPL + SDK 384_81918 (minus lighttpd changes) for RT-AC86U
• httpd: don't rely on nvram and nvram-stored cert for saving, we already do so at generation time
• rc: add kludge to watchdog for pre-384_81918 SDK 6.37 binary blobs
• Updated documentation
• Updated documentation
• shared: added missing shared blobs for RT-AC3100
• dropbear: update to 2020.79
• Merged RT-AC5300 binary blobs from 384_81902
• lighttpd: merge updated components + code from 384_819xx
• Removed obsolete LE lighttpd instance
• openvpn: store empty field instead of 0.0.0.0 in policy rules
• Updated documentation
• nano: updated to 4.9.3
• Updated documentation
• Updated documentation
• Merged RT-AC88U binary blobs from 384_81919
• rc: revert RT-AC88U kludge in watchdog
• rc: eliminate log spam occuring every four seconds while testing RTK switch status
• rom: hardcode wget timeout value in firmware update check scripts
• dropbear: update to 2020.80
• dropbear: use common random source for ltm
• vpnc: add static routing and def. gateway control
• Revert "vpnc: add static routing and def. gateway control"
• Updated documentation
• Updated documentation
• Revert "Revert "vpnc: add static routing and def. gateway control""
• Updated documentation
• httpd: www: implement notification on low jffs space
• Updated documentation
• build: fix processor count for parallel building
• build: enable parallel building for curl
• build: enable parallel kernel building for SDK6/SDK7 models
• other: fix am_get_webui_page() returning new mount point before matching existing file
• other: optimize am_get_webui_page loop
• Merge pull request #558 from dave14305/patch-1
• webui: fixed typo on low JFFS notification
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• Merged GPL + binary blobs 384_81981 for RT-AC5300
• bwdpi: merged bwdpi components from 385_20630 firmware image for RT-AC68U
• rc: httpd: harmonize httpd/vsftpd cert storage handling with upstream
• Merged GPL + SDK 384_81992 from RT-AC86U
• httpd: only save certificate if self-generated
• webui: update cert info display to be in-line with httpd/rc changes from 7917e3b
• Updated documentation
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• rom: fix duplicate CA bundle, and keep the updated one
• httpd: don't set tlscrypt nvram when parsing tls-crypt from an imported ovpn, this is only used by Asus.
• libvpn: implement copy_ovpn_key()
• rc: improve handling of clock-sensitive services on first WAN up.
• Updated documentation
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• libvpn: fixed log message on OpenVPN start
• libvpn: remove some no longer used defines
• webui: warn user when enabling user/pass auth for an OpenVPN client without providing both
• openvpn: skip DNS redirection for clients using an empty source instead of 0.0.0.0 (the old way of denoting "any")
• shared: fixed bad ipt_account() merge
• webui: report openvpn client error code 7 as a config error, not key/cert
• openvpn: set nvram errno if there is a config error preventing start
• fix typo
• openvpn: second stage of rewrite/refactor; harmonize master with mainline code
• webui: fix incorrect input field validated when applying an OpenVPN client configuration
• libovpn: don't allow duplicate-cn while in non-exclusive config-dir mode
• libovpn: also reapply DNS and QOS firewall rules when re-applying firewall rules
• rc: ensure that if openvpn client failed to start, that the instance gets set into an error state
• rc: let openvpn down event handler update dnsmasq/resolv config
• libovpn: remove unused (and inaccurate) constants
• shared: remove vpn_debug nvram (no longer used)
• Updated documentation
• Merge pull request #568 from maghuro/patch-2
• openvpn: remove duplicate line
• webui: fix check for userauth being enabled on OpenVPN client page; separate check/focus for both fields
• dropbear: libtommath: enable fixed cutoffs as size-optimization
• dnsmasq: update to 2.82 (2.82-34-gb309cca-openssl)
• openvpn: third stage - replacement of up/down handlers with libovpn functions, and fixes.
• Updated documentation
• rc: fix bad merge in ovpn.c
• rc: use the correct WAN interface ...

Unstable: 386.00_0-gnuton0_alpha9

Changes from the latest stable gnuton build (384.17_0-gnuton1):

• build: Added circleci config file
• build: updated tools/copy-prebuilt to support DSL-AC68U target
• build: fixed tools/copy-prebuilt script which was copying release/src/router/tuxera/ in the wrong dir
• Merged DSL-AC68U GPL 384.56087 prebuilds
• build: added DSL-AC68U configuration to src-rt make target
• build: fixed build when DUALWAN and DSL are enabled
• Cleaning up remov some 'false' files
• Merged asuswrt 384.56087 GPL to release/src/router/shared/sysdeps/
• Import release/src/router/shared/prebuild/DSL-AC68U/ from GPL asuswrt 384.56087
• create release for each tag type
• tools/copy-prebuilt copies DSL-N55U GPL router/www/sysdep files since they are needed by DSL-AC68U and maybe other DSL variants in the future
• ExtendedNo var is set during compilation when a commit is tagged
• Imported src/router/www/sysdep/DSL-N55U/www/ files from GPL 384.56087 since they are needed by DSL variants
• Merged latest upstream Merlin code
• Sanitize CIRCLE_TAG to be used as EXTEND_NO
• feature: Added let's encrypt to src-rt/target.mak for DSL-AC68U
• Rename CI workflow and ignore master
• Merging new changes imported from RT-AC88U branch
• Merge remote-tracking branch 'upstream/mainline' into dsl-ac68u
• spectrum: imported app for DSL routers from DSL-AC68U GPL 384.56087
• httpd: upstream web.c reverted back since RT GPL is ahead of DSL one
• httpd: Added back get_dnsprivacy_presets
• webui: banner logo link set to gnuton's github
• webui: enabled firmware update checks for gnuton's builds
• fwupdate: FIX new firmwares with alphabetically bigger extendedno are not correcly detected
• Merged asus merlin code
• Merge upstream tag '384.14-beta1-mainline' into dsl-ac68u
• buildfix: httpd/web.c has been checked out from tags/384.13-beta1-mainline
• buildfix: set_fw_path.cgi not available for DSL-AC68U as for RT
• buildfix: do not threat warning as errors for router
• dsl-ac68u: Prebuild imported from GPL_DSL-AC68U_3.0.0.4.384.81140
• Merged RMerl 384.14-beta2-mainline
• buildfix: Backported rc/prebuild/DSL-AC68U/tcode_brcm.o from RT-AC86U since wl_disband5grp symbol was required for building
• Merged in GPL_DSL-AC68U_3.0.0.4.384.81727-g7c23ae8 prebuilds
• Merge tag '384.14-beta3-mainline' into 384.14_beta3
• Merge tag '384.14-mainline' into 384.14
• getdns: provide explicit path to OpenSSL 1.1.1 (fixes regression fom GPL 81044 merge)
• rc: fail wanduck (and possibly other services) failing to start due to ate_mode check
• rstats: revert some of the 384_81044 changes in an attempt to resolve the traffic spikes
• rc: log if router is in manufacturing mode at wanduck launch
• Updated documentation
• rc: fix bad GPL merge
• rc: remove no longer required kludge for STP on HND models
• build: re-add cifs.ko module (lost with GPL 81044 merge)
• webui: hide _0 extendno from firmware versions returned by cfg_sync
• Updated documentation
• Merge tag '384.14_2-mainline' into dsl-ac68u-384.14_2-mainline
• dsl-ac68u: build: fix - picks latest previous tag in case of releases
• Merge tag '384.15-mainline' into dsl-ac68u-384.15
• Merge tag '384.16-mainline' into dsl-ac68u-384.16
• Merge tag '384.17-mainline' into dsl-ac68u-384.17
• curl: fix build recipe when generating configure
• getdns: fix building under Ubuntu 20.04 LTS
• libgpg-error: fix building with gawk 5.0 (backport from upstream)
• Merge pull request #1 from RMerl/master
• Release amtm 3.1.7
• Merge pull request #509 from decoderman/master
• Updated documentation
• dropbear: Fix ssh client connection with Chacha20-Poly1305
• Updated documentation
• Merge GPL + SDK 384_81846 (RT-AC86U)
• Merge RT-AC86U binary blobs from 384_81846
• webui: updates to the QoS Stats page.
• Merge RT-AC68U SDK + binary blobs from 385_20490 (identical code to 384_81846)
• Merge RT-AC5300 binary blobs from 384_81844
• Merge RT-AC3100 SDK + binary blobs from 385_20490
• ahs: add binary collections to ahs/asd/libasc
• rc: update pw_dec() call in openvpn code to the new definition
• webui: optimize draw_conntrack_table() by removing code related to unsupported tQoS mode; fix tQoS default category labeling"
• webui: fix JS syntax error from upstream's Wireless Log page
• Updated documentation
• webui: harmonize dhcp_staticlist length with upstream
• Fix Privacy disclosure Wiki link in README
• httpd: rework gencert.sh script responsible for generating web certificate
• cfg_mnt: update gencfgcert to match updated openssl.cnf config file
• rc: copy stored cert.crt when starting httpds
• httpd: re-implement persistent certificate storage (lost in commit cdfc71f)
• Disable AHS and ASD on all supported models
• webui: remove validator.hostname() to match upstream (and replace one existing use with validator.host_name())
• Merge pull request #525 from borzaka/patch-1
• dropbear: Fix ChaCha20 on 32-bit platforms
• busybox: updated a few options to match upstream settings
• openvpn: revert 81846 change which broke setting ovpn server state to RUNNING
• Update updown-client.sh
• Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)
• Merge pull request #530 from Xentrk/master
• ssl: update root certificates to June 3rd 2020
• Updated documentation
• Revert "Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)"
• flac: properly provide libogg path (fixes building on some environment)
• openvpn: remove obsolete configure options that no longer exist
• build: parallelize rc and wget building
• www: updated OUI database
• Updated documentation
• webui: fix sorting by DNS field on DHCP reservation table
• Merged GPL + SDK 384_81918 (minus lighttpd changes) for RT-AC86U
• httpd: don't rely on nvram and nvram-stored cert for saving, we already do so at generation time
• rc: add kludge to watchdog for pre-384_81918 SDK 6.37 binary blobs
• Updated documentation
• Updated documentation
• shared: added missing shared blobs for RT-AC3100
• dropbear: update to 2020.79
• Merged RT-AC5300 binary blobs from 384_81902
• lighttpd: merge updated components + code from 384_819xx
• Removed obsolete LE lighttpd instance
• openvpn: store empty field instead of 0.0.0.0 in policy rules
• Updated documentation
• nano: updated to 4.9.3
• Updated documentation
• Updated documentation
• Merged RT-AC88U binary blobs from 384_81919
• rc: revert RT-AC88U kludge in watchdog
• rc: eliminate log spam occuring every four seconds while testing RTK switch status
• rom: hardcode wget timeout value in firmware update check scripts
• dropbear: update to 2020.80
• dropbear: use common random source for ltm
• vpnc: add static routing and def. gateway control
• Revert "vpnc: add static routing and def. gateway control"
• Updated documentation
• Updated documentation
• Revert "Revert "vpnc: add static routing and def. gateway control""
• Updated documentation
• httpd: www: implement notification on low jffs space
• Updated documentation
• build: fix processor count for parallel building
• build: enable parallel building for curl
• build: enable parallel kernel building for SDK6/SDK7 models
• other: fix am_get_webui_page() returning new mount point before matching existing file
• other: optimize am_get_webui_page loop
• Merge pull request #558 from dave14305/patch-1
• webui: fixed typo on low JFFS notification
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• Merged GPL + binary blobs 384_81981 for RT-AC5300
• bwdpi: merged bwdpi components from 385_20630 firmware image for RT-AC68U
• rc: httpd: harmonize httpd/vsftpd cert storage handling with upstream
• Merged GPL + SDK 384_81992 from RT-AC86U
• httpd: only save certificate if self-generated
• webui: update cert info display to be in-line with httpd/rc changes from 7917e3b
• Updated documentation
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• rom: fix duplicate CA bundle, and keep the updated one
• httpd: don't set tlscrypt nvram when parsing tls-crypt from an imported ovpn, this is only used by Asus.
• libvpn: implement copy_ovpn_key()
• rc: improve handling of clock-sensitive services on first WAN up.
• Updated documentation
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• libvpn: fixed log message on OpenVPN start
• libvpn: remove some no longer used defines
• webui: warn user when enabling user/pass auth for an OpenVPN client without providing both
• openvpn: skip DNS redirection for clients using an empty source instead of 0.0.0.0 (the old way of denoting "any")
• shared: fixed bad ipt_account() merge
• webui: report openvpn client error code 7 as a config error, not key/cert
• openvpn: set nvram errno if there is a config error preventing start
• fix typo
• openvpn: second stage of rewrite/refactor; harmonize master with mainline code
• webui: fix incorrect input field validated when applying an OpenVPN client configuration
• libovpn: don't allow duplicate-cn while in non-exclusive config-dir mode
• libovpn: also reapply DNS and QOS firewall rules when re-applying firewall rules
• rc: ensure that if openvpn client failed to start, that the instance gets set into an error state
• rc: let openvpn down event handler update dnsmasq/resolv config
• libovpn: remove unused (and inaccurate) constants
• shared: remove vpn_debug nvram (no longer used)
• Updated documentation
• Merge pull request #568 from maghuro/patch-2
• openvpn: remove duplicate line
• webui: fix check for userauth being enabled on OpenVPN client page; separate check/focus for both fields
• dropbear: libtommath: enable fixed cutoffs as size-optimization
• dnsmasq: update to 2.82 (2.82-34-gb309cca-openssl)
• openvpn: third stage - replacement of up/down handlers with libovpn functions, and fixes.
• Updated documentation
• rc: fix bad merge in ovpn.c
• rc: use the correct WAN interface ...

Unstable: 386.00_0-gnuton0_alpha8

Changes from the latest stable gnuton build (384.17_0-gnuton1):

• build: Added circleci config file
• build: updated tools/copy-prebuilt to support DSL-AC68U target
• build: fixed tools/copy-prebuilt script which was copying release/src/router/tuxera/ in the wrong dir
• Merged DSL-AC68U GPL 384.56087 prebuilds
• build: added DSL-AC68U configuration to src-rt make target
• build: fixed build when DUALWAN and DSL are enabled
• Cleaning up remov some 'false' files
• Merged asuswrt 384.56087 GPL to release/src/router/shared/sysdeps/
• Import release/src/router/shared/prebuild/DSL-AC68U/ from GPL asuswrt 384.56087
• create release for each tag type
• tools/copy-prebuilt copies DSL-N55U GPL router/www/sysdep files since they are needed by DSL-AC68U and maybe other DSL variants in the future
• ExtendedNo var is set during compilation when a commit is tagged
• Imported src/router/www/sysdep/DSL-N55U/www/ files from GPL 384.56087 since they are needed by DSL variants
• Merged latest upstream Merlin code
• Sanitize CIRCLE_TAG to be used as EXTEND_NO
• feature: Added let's encrypt to src-rt/target.mak for DSL-AC68U
• Rename CI workflow and ignore master
• Merging new changes imported from RT-AC88U branch
• Merge remote-tracking branch 'upstream/mainline' into dsl-ac68u
• spectrum: imported app for DSL routers from DSL-AC68U GPL 384.56087
• httpd: upstream web.c reverted back since RT GPL is ahead of DSL one
• httpd: Added back get_dnsprivacy_presets
• webui: banner logo link set to gnuton's github
• webui: enabled firmware update checks for gnuton's builds
• fwupdate: FIX new firmwares with alphabetically bigger extendedno are not correcly detected
• Merged asus merlin code
• Merge upstream tag '384.14-beta1-mainline' into dsl-ac68u
• buildfix: httpd/web.c has been checked out from tags/384.13-beta1-mainline
• buildfix: set_fw_path.cgi not available for DSL-AC68U as for RT
• buildfix: do not threat warning as errors for router
• dsl-ac68u: Prebuild imported from GPL_DSL-AC68U_3.0.0.4.384.81140
• Merged RMerl 384.14-beta2-mainline
• buildfix: Backported rc/prebuild/DSL-AC68U/tcode_brcm.o from RT-AC86U since wl_disband5grp symbol was required for building
• Merged in GPL_DSL-AC68U_3.0.0.4.384.81727-g7c23ae8 prebuilds
• Merge tag '384.14-beta3-mainline' into 384.14_beta3
• Merge tag '384.14-mainline' into 384.14
• getdns: provide explicit path to OpenSSL 1.1.1 (fixes regression fom GPL 81044 merge)
• rc: fail wanduck (and possibly other services) failing to start due to ate_mode check
• rstats: revert some of the 384_81044 changes in an attempt to resolve the traffic spikes
• rc: log if router is in manufacturing mode at wanduck launch
• Updated documentation
• rc: fix bad GPL merge
• rc: remove no longer required kludge for STP on HND models
• build: re-add cifs.ko module (lost with GPL 81044 merge)
• webui: hide _0 extendno from firmware versions returned by cfg_sync
• Updated documentation
• Merge tag '384.14_2-mainline' into dsl-ac68u-384.14_2-mainline
• dsl-ac68u: build: fix - picks latest previous tag in case of releases
• Merge tag '384.15-mainline' into dsl-ac68u-384.15
• Merge tag '384.16-mainline' into dsl-ac68u-384.16
• Merge tag '384.17-mainline' into dsl-ac68u-384.17
• curl: fix build recipe when generating configure
• getdns: fix building under Ubuntu 20.04 LTS
• libgpg-error: fix building with gawk 5.0 (backport from upstream)
• Merge pull request #1 from RMerl/master
• Release amtm 3.1.7
• Merge pull request #509 from decoderman/master
• Updated documentation
• dropbear: Fix ssh client connection with Chacha20-Poly1305
• Updated documentation
• Merge GPL + SDK 384_81846 (RT-AC86U)
• Merge RT-AC86U binary blobs from 384_81846
• webui: updates to the QoS Stats page.
• Merge RT-AC68U SDK + binary blobs from 385_20490 (identical code to 384_81846)
• Merge RT-AC5300 binary blobs from 384_81844
• Merge RT-AC3100 SDK + binary blobs from 385_20490
• ahs: add binary collections to ahs/asd/libasc
• rc: update pw_dec() call in openvpn code to the new definition
• webui: optimize draw_conntrack_table() by removing code related to unsupported tQoS mode; fix tQoS default category labeling"
• webui: fix JS syntax error from upstream's Wireless Log page
• Updated documentation
• webui: harmonize dhcp_staticlist length with upstream
• Fix Privacy disclosure Wiki link in README
• httpd: rework gencert.sh script responsible for generating web certificate
• cfg_mnt: update gencfgcert to match updated openssl.cnf config file
• rc: copy stored cert.crt when starting httpds
• httpd: re-implement persistent certificate storage (lost in commit cdfc71f)
• Disable AHS and ASD on all supported models
• webui: remove validator.hostname() to match upstream (and replace one existing use with validator.host_name())
• Merge pull request #525 from borzaka/patch-1
• dropbear: Fix ChaCha20 on 32-bit platforms
• busybox: updated a few options to match upstream settings
• openvpn: revert 81846 change which broke setting ovpn server state to RUNNING
• Update updown-client.sh
• Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)
• Merge pull request #530 from Xentrk/master
• ssl: update root certificates to June 3rd 2020
• Updated documentation
• Revert "Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)"
• flac: properly provide libogg path (fixes building on some environment)
• openvpn: remove obsolete configure options that no longer exist
• build: parallelize rc and wget building
• www: updated OUI database
• Updated documentation
• webui: fix sorting by DNS field on DHCP reservation table
• Merged GPL + SDK 384_81918 (minus lighttpd changes) for RT-AC86U
• httpd: don't rely on nvram and nvram-stored cert for saving, we already do so at generation time
• rc: add kludge to watchdog for pre-384_81918 SDK 6.37 binary blobs
• Updated documentation
• Updated documentation
• shared: added missing shared blobs for RT-AC3100
• dropbear: update to 2020.79
• Merged RT-AC5300 binary blobs from 384_81902
• lighttpd: merge updated components + code from 384_819xx
• Removed obsolete LE lighttpd instance
• openvpn: store empty field instead of 0.0.0.0 in policy rules
• Updated documentation
• nano: updated to 4.9.3
• Updated documentation
• Updated documentation
• Merged RT-AC88U binary blobs from 384_81919
• rc: revert RT-AC88U kludge in watchdog
• rc: eliminate log spam occuring every four seconds while testing RTK switch status
• rom: hardcode wget timeout value in firmware update check scripts
• dropbear: update to 2020.80
• dropbear: use common random source for ltm
• vpnc: add static routing and def. gateway control
• Revert "vpnc: add static routing and def. gateway control"
• Updated documentation
• Updated documentation
• Revert "Revert "vpnc: add static routing and def. gateway control""
• Updated documentation
• httpd: www: implement notification on low jffs space
• Updated documentation
• build: fix processor count for parallel building
• build: enable parallel building for curl
• build: enable parallel kernel building for SDK6/SDK7 models
• other: fix am_get_webui_page() returning new mount point before matching existing file
• other: optimize am_get_webui_page loop
• Merge pull request #558 from dave14305/patch-1
• webui: fixed typo on low JFFS notification
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• Merged GPL + binary blobs 384_81981 for RT-AC5300
• bwdpi: merged bwdpi components from 385_20630 firmware image for RT-AC68U
• rc: httpd: harmonize httpd/vsftpd cert storage handling with upstream
• Merged GPL + SDK 384_81992 from RT-AC86U
• httpd: only save certificate if self-generated
• webui: update cert info display to be in-line with httpd/rc changes from 7917e3b
• Updated documentation
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• rom: fix duplicate CA bundle, and keep the updated one
• httpd: don't set tlscrypt nvram when parsing tls-crypt from an imported ovpn, this is only used by Asus.
• libvpn: implement copy_ovpn_key()
• rc: improve handling of clock-sensitive services on first WAN up.
• Updated documentation
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• libvpn: fixed log message on OpenVPN start
• libvpn: remove some no longer used defines
• webui: warn user when enabling user/pass auth for an OpenVPN client without providing both
• openvpn: skip DNS redirection for clients using an empty source instead of 0.0.0.0 (the old way of denoting "any")
• shared: fixed bad ipt_account() merge
• webui: report openvpn client error code 7 as a config error, not key/cert
• openvpn: set nvram errno if there is a config error preventing start
• fix typo
• openvpn: second stage of rewrite/refactor; harmonize master with mainline code
• webui: fix incorrect input field validated when applying an OpenVPN client configuration
• libovpn: don't allow duplicate-cn while in non-exclusive config-dir mode
• libovpn: also reapply DNS and QOS firewall rules when re-applying firewall rules
• rc: ensure that if openvpn client failed to start, that the instance gets set into an error state
• rc: let openvpn down event handler update dnsmasq/resolv config
• libovpn: remove unused (and inaccurate) constants
• shared: remove vpn_debug nvram (no longer used)
• Updated documentation
• Merge pull request #568 from maghuro/patch-2
• openvpn: remove duplicate line
• webui: fix check for userauth being enabled on OpenVPN client page; separate check/focus for both fields
• dropbear: libtommath: enable fixed cutoffs as size-optimization
• dnsmasq: update to 2.82 (2.82-34-gb309cca-openssl)
• openvpn: third stage - replacement of up/down handlers with libovpn functions, and fixes.
• Updated documentation
• rc: fix bad merge in ovpn.c
• rc: use the correct WAN interface ...

Unstable: 386.00_0-gnuton0_alpha7

Changes from the latest stable gnuton build (384.17_0-gnuton1):

• build: Added circleci config file
• build: updated tools/copy-prebuilt to support DSL-AC68U target
• build: fixed tools/copy-prebuilt script which was copying release/src/router/tuxera/ in the wrong dir
• Merged DSL-AC68U GPL 384.56087 prebuilds
• build: added DSL-AC68U configuration to src-rt make target
• build: fixed build when DUALWAN and DSL are enabled
• Cleaning up remov some 'false' files
• Merged asuswrt 384.56087 GPL to release/src/router/shared/sysdeps/
• Import release/src/router/shared/prebuild/DSL-AC68U/ from GPL asuswrt 384.56087
• create release for each tag type
• tools/copy-prebuilt copies DSL-N55U GPL router/www/sysdep files since they are needed by DSL-AC68U and maybe other DSL variants in the future
• ExtendedNo var is set during compilation when a commit is tagged
• Imported src/router/www/sysdep/DSL-N55U/www/ files from GPL 384.56087 since they are needed by DSL variants
• Merged latest upstream Merlin code
• Sanitize CIRCLE_TAG to be used as EXTEND_NO
• feature: Added let's encrypt to src-rt/target.mak for DSL-AC68U
• Rename CI workflow and ignore master
• Merging new changes imported from RT-AC88U branch
• Merge remote-tracking branch 'upstream/mainline' into dsl-ac68u
• spectrum: imported app for DSL routers from DSL-AC68U GPL 384.56087
• httpd: upstream web.c reverted back since RT GPL is ahead of DSL one
• httpd: Added back get_dnsprivacy_presets
• webui: banner logo link set to gnuton's github
• webui: enabled firmware update checks for gnuton's builds
• fwupdate: FIX new firmwares with alphabetically bigger extendedno are not correcly detected
• Merged asus merlin code
• Merge upstream tag '384.14-beta1-mainline' into dsl-ac68u
• buildfix: httpd/web.c has been checked out from tags/384.13-beta1-mainline
• buildfix: set_fw_path.cgi not available for DSL-AC68U as for RT
• buildfix: do not threat warning as errors for router
• dsl-ac68u: Prebuild imported from GPL_DSL-AC68U_3.0.0.4.384.81140
• Merged RMerl 384.14-beta2-mainline
• buildfix: Backported rc/prebuild/DSL-AC68U/tcode_brcm.o from RT-AC86U since wl_disband5grp symbol was required for building
• Merged in GPL_DSL-AC68U_3.0.0.4.384.81727-g7c23ae8 prebuilds
• Merge tag '384.14-beta3-mainline' into 384.14_beta3
• Merge tag '384.14-mainline' into 384.14
• getdns: provide explicit path to OpenSSL 1.1.1 (fixes regression fom GPL 81044 merge)
• rc: fail wanduck (and possibly other services) failing to start due to ate_mode check
• rstats: revert some of the 384_81044 changes in an attempt to resolve the traffic spikes
• rc: log if router is in manufacturing mode at wanduck launch
• Updated documentation
• rc: fix bad GPL merge
• rc: remove no longer required kludge for STP on HND models
• build: re-add cifs.ko module (lost with GPL 81044 merge)
• webui: hide _0 extendno from firmware versions returned by cfg_sync
• Updated documentation
• Merge tag '384.14_2-mainline' into dsl-ac68u-384.14_2-mainline
• dsl-ac68u: build: fix - picks latest previous tag in case of releases
• Merge tag '384.15-mainline' into dsl-ac68u-384.15
• Merge tag '384.16-mainline' into dsl-ac68u-384.16
• Merge tag '384.17-mainline' into dsl-ac68u-384.17
• curl: fix build recipe when generating configure
• getdns: fix building under Ubuntu 20.04 LTS
• libgpg-error: fix building with gawk 5.0 (backport from upstream)
• Merge pull request #1 from RMerl/master
• Release amtm 3.1.7
• Merge pull request #509 from decoderman/master
• Updated documentation
• dropbear: Fix ssh client connection with Chacha20-Poly1305
• Updated documentation
• Merge GPL + SDK 384_81846 (RT-AC86U)
• Merge RT-AC86U binary blobs from 384_81846
• webui: updates to the QoS Stats page.
• Merge RT-AC68U SDK + binary blobs from 385_20490 (identical code to 384_81846)
• Merge RT-AC5300 binary blobs from 384_81844
• Merge RT-AC3100 SDK + binary blobs from 385_20490
• ahs: add binary collections to ahs/asd/libasc
• rc: update pw_dec() call in openvpn code to the new definition
• webui: optimize draw_conntrack_table() by removing code related to unsupported tQoS mode; fix tQoS default category labeling"
• webui: fix JS syntax error from upstream's Wireless Log page
• Updated documentation
• webui: harmonize dhcp_staticlist length with upstream
• Fix Privacy disclosure Wiki link in README
• httpd: rework gencert.sh script responsible for generating web certificate
• cfg_mnt: update gencfgcert to match updated openssl.cnf config file
• rc: copy stored cert.crt when starting httpds
• httpd: re-implement persistent certificate storage (lost in commit cdfc71f)
• Disable AHS and ASD on all supported models
• webui: remove validator.hostname() to match upstream (and replace one existing use with validator.host_name())
• Merge pull request #525 from borzaka/patch-1
• dropbear: Fix ChaCha20 on 32-bit platforms
• busybox: updated a few options to match upstream settings
• openvpn: revert 81846 change which broke setting ovpn server state to RUNNING
• Update updown-client.sh
• Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)
• Merge pull request #530 from Xentrk/master
• ssl: update root certificates to June 3rd 2020
• Updated documentation
• Revert "Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)"
• flac: properly provide libogg path (fixes building on some environment)
• openvpn: remove obsolete configure options that no longer exist
• build: parallelize rc and wget building
• www: updated OUI database
• Updated documentation
• webui: fix sorting by DNS field on DHCP reservation table
• Merged GPL + SDK 384_81918 (minus lighttpd changes) for RT-AC86U
• httpd: don't rely on nvram and nvram-stored cert for saving, we already do so at generation time
• rc: add kludge to watchdog for pre-384_81918 SDK 6.37 binary blobs
• Updated documentation
• Updated documentation
• shared: added missing shared blobs for RT-AC3100
• dropbear: update to 2020.79
• Merged RT-AC5300 binary blobs from 384_81902
• lighttpd: merge updated components + code from 384_819xx
• Removed obsolete LE lighttpd instance
• openvpn: store empty field instead of 0.0.0.0 in policy rules
• Updated documentation
• nano: updated to 4.9.3
• Updated documentation
• Updated documentation
• Merged RT-AC88U binary blobs from 384_81919
• rc: revert RT-AC88U kludge in watchdog
• rc: eliminate log spam occuring every four seconds while testing RTK switch status
• rom: hardcode wget timeout value in firmware update check scripts
• dropbear: update to 2020.80
• dropbear: use common random source for ltm
• vpnc: add static routing and def. gateway control
• Revert "vpnc: add static routing and def. gateway control"
• Updated documentation
• Updated documentation
• Revert "Revert "vpnc: add static routing and def. gateway control""
• Updated documentation
• httpd: www: implement notification on low jffs space
• Updated documentation
• build: fix processor count for parallel building
• build: enable parallel building for curl
• build: enable parallel kernel building for SDK6/SDK7 models
• other: fix am_get_webui_page() returning new mount point before matching existing file
• other: optimize am_get_webui_page loop
• Merge pull request #558 from dave14305/patch-1
• webui: fixed typo on low JFFS notification
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• Merged GPL + binary blobs 384_81981 for RT-AC5300
• bwdpi: merged bwdpi components from 385_20630 firmware image for RT-AC68U
• rc: httpd: harmonize httpd/vsftpd cert storage handling with upstream
• Merged GPL + SDK 384_81992 from RT-AC86U
• httpd: only save certificate if self-generated
• webui: update cert info display to be in-line with httpd/rc changes from 7917e3b
• Updated documentation
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• rom: fix duplicate CA bundle, and keep the updated one
• httpd: don't set tlscrypt nvram when parsing tls-crypt from an imported ovpn, this is only used by Asus.
• libvpn: implement copy_ovpn_key()
• rc: improve handling of clock-sensitive services on first WAN up.
• Updated documentation
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• libvpn: fixed log message on OpenVPN start
• libvpn: remove some no longer used defines
• webui: warn user when enabling user/pass auth for an OpenVPN client without providing both
• openvpn: skip DNS redirection for clients using an empty source instead of 0.0.0.0 (the old way of denoting "any")
• shared: fixed bad ipt_account() merge
• webui: report openvpn client error code 7 as a config error, not key/cert
• openvpn: set nvram errno if there is a config error preventing start
• fix typo
• openvpn: second stage of rewrite/refactor; harmonize master with mainline code
• webui: fix incorrect input field validated when applying an OpenVPN client configuration
• libovpn: don't allow duplicate-cn while in non-exclusive config-dir mode
• libovpn: also reapply DNS and QOS firewall rules when re-applying firewall rules
• rc: ensure that if openvpn client failed to start, that the instance gets set into an error state
• rc: let openvpn down event handler update dnsmasq/resolv config
• libovpn: remove unused (and inaccurate) constants
• shared: remove vpn_debug nvram (no longer used)
• Updated documentation
• Merge pull request #568 from maghuro/patch-2
• openvpn: remove duplicate line
• webui: fix check for userauth being enabled on OpenVPN client page; separate check/focus for both fields
• dropbear: libtommath: enable fixed cutoffs as size-optimization
• dnsmasq: update to 2.82 (2.82-34-gb309cca-openssl)
• openvpn: third stage - replacement of up/down handlers with libovpn functions, and fixes.
• Updated documentation
• rc: fix bad merge in ovpn.c
• rc: use the correct WAN interface ...

Unstable: 386.00_0-gnuton0_alpha6

Changes from the latest stable gnuton build (384.17_0-gnuton1):

• build: Added circleci config file
• build: updated tools/copy-prebuilt to support DSL-AC68U target
• build: fixed tools/copy-prebuilt script which was copying release/src/router/tuxera/ in the wrong dir
• Merged DSL-AC68U GPL 384.56087 prebuilds
• build: added DSL-AC68U configuration to src-rt make target
• build: fixed build when DUALWAN and DSL are enabled
• Cleaning up remov some 'false' files
• Merged asuswrt 384.56087 GPL to release/src/router/shared/sysdeps/
• Import release/src/router/shared/prebuild/DSL-AC68U/ from GPL asuswrt 384.56087
• create release for each tag type
• tools/copy-prebuilt copies DSL-N55U GPL router/www/sysdep files since they are needed by DSL-AC68U and maybe other DSL variants in the future
• ExtendedNo var is set during compilation when a commit is tagged
• Imported src/router/www/sysdep/DSL-N55U/www/ files from GPL 384.56087 since they are needed by DSL variants
• Merged latest upstream Merlin code
• Sanitize CIRCLE_TAG to be used as EXTEND_NO
• feature: Added let's encrypt to src-rt/target.mak for DSL-AC68U
• Rename CI workflow and ignore master
• Merging new changes imported from RT-AC88U branch
• Merge remote-tracking branch 'upstream/mainline' into dsl-ac68u
• spectrum: imported app for DSL routers from DSL-AC68U GPL 384.56087
• httpd: upstream web.c reverted back since RT GPL is ahead of DSL one
• httpd: Added back get_dnsprivacy_presets
• webui: banner logo link set to gnuton's github
• webui: enabled firmware update checks for gnuton's builds
• fwupdate: FIX new firmwares with alphabetically bigger extendedno are not correcly detected
• Merged asus merlin code
• Merge upstream tag '384.14-beta1-mainline' into dsl-ac68u
• buildfix: httpd/web.c has been checked out from tags/384.13-beta1-mainline
• buildfix: set_fw_path.cgi not available for DSL-AC68U as for RT
• buildfix: do not threat warning as errors for router
• dsl-ac68u: Prebuild imported from GPL_DSL-AC68U_3.0.0.4.384.81140
• Merged RMerl 384.14-beta2-mainline
• buildfix: Backported rc/prebuild/DSL-AC68U/tcode_brcm.o from RT-AC86U since wl_disband5grp symbol was required for building
• Merged in GPL_DSL-AC68U_3.0.0.4.384.81727-g7c23ae8 prebuilds
• Merge tag '384.14-beta3-mainline' into 384.14_beta3
• Merge tag '384.14-mainline' into 384.14
• getdns: provide explicit path to OpenSSL 1.1.1 (fixes regression fom GPL 81044 merge)
• rc: fail wanduck (and possibly other services) failing to start due to ate_mode check
• rstats: revert some of the 384_81044 changes in an attempt to resolve the traffic spikes
• rc: log if router is in manufacturing mode at wanduck launch
• Updated documentation
• rc: fix bad GPL merge
• rc: remove no longer required kludge for STP on HND models
• build: re-add cifs.ko module (lost with GPL 81044 merge)
• webui: hide _0 extendno from firmware versions returned by cfg_sync
• Updated documentation
• Merge tag '384.14_2-mainline' into dsl-ac68u-384.14_2-mainline
• dsl-ac68u: build: fix - picks latest previous tag in case of releases
• Merge tag '384.15-mainline' into dsl-ac68u-384.15
• Merge tag '384.16-mainline' into dsl-ac68u-384.16
• Merge tag '384.17-mainline' into dsl-ac68u-384.17
• curl: fix build recipe when generating configure
• getdns: fix building under Ubuntu 20.04 LTS
• libgpg-error: fix building with gawk 5.0 (backport from upstream)
• Merge pull request #1 from RMerl/master
• Release amtm 3.1.7
• Merge pull request #509 from decoderman/master
• Updated documentation
• dropbear: Fix ssh client connection with Chacha20-Poly1305
• Updated documentation
• Merge GPL + SDK 384_81846 (RT-AC86U)
• Merge RT-AC86U binary blobs from 384_81846
• webui: updates to the QoS Stats page.
• Merge RT-AC68U SDK + binary blobs from 385_20490 (identical code to 384_81846)
• Merge RT-AC5300 binary blobs from 384_81844
• Merge RT-AC3100 SDK + binary blobs from 385_20490
• ahs: add binary collections to ahs/asd/libasc
• rc: update pw_dec() call in openvpn code to the new definition
• webui: optimize draw_conntrack_table() by removing code related to unsupported tQoS mode; fix tQoS default category labeling"
• webui: fix JS syntax error from upstream's Wireless Log page
• Updated documentation
• webui: harmonize dhcp_staticlist length with upstream
• Fix Privacy disclosure Wiki link in README
• httpd: rework gencert.sh script responsible for generating web certificate
• cfg_mnt: update gencfgcert to match updated openssl.cnf config file
• rc: copy stored cert.crt when starting httpds
• httpd: re-implement persistent certificate storage (lost in commit cdfc71f)
• Disable AHS and ASD on all supported models
• webui: remove validator.hostname() to match upstream (and replace one existing use with validator.host_name())
• Merge pull request #525 from borzaka/patch-1
• dropbear: Fix ChaCha20 on 32-bit platforms
• busybox: updated a few options to match upstream settings
• openvpn: revert 81846 change which broke setting ovpn server state to RUNNING
• Update updown-client.sh
• Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)
• Merge pull request #530 from Xentrk/master
• ssl: update root certificates to June 3rd 2020
• Updated documentation
• Revert "Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)"
• flac: properly provide libogg path (fixes building on some environment)
• openvpn: remove obsolete configure options that no longer exist
• build: parallelize rc and wget building
• www: updated OUI database
• Updated documentation
• webui: fix sorting by DNS field on DHCP reservation table
• Merged GPL + SDK 384_81918 (minus lighttpd changes) for RT-AC86U
• httpd: don't rely on nvram and nvram-stored cert for saving, we already do so at generation time
• rc: add kludge to watchdog for pre-384_81918 SDK 6.37 binary blobs
• Updated documentation
• Updated documentation
• shared: added missing shared blobs for RT-AC3100
• dropbear: update to 2020.79
• Merged RT-AC5300 binary blobs from 384_81902
• lighttpd: merge updated components + code from 384_819xx
• Removed obsolete LE lighttpd instance
• openvpn: store empty field instead of 0.0.0.0 in policy rules
• Updated documentation
• nano: updated to 4.9.3
• Updated documentation
• Updated documentation
• Merged RT-AC88U binary blobs from 384_81919
• rc: revert RT-AC88U kludge in watchdog
• rc: eliminate log spam occuring every four seconds while testing RTK switch status
• rom: hardcode wget timeout value in firmware update check scripts
• dropbear: update to 2020.80
• dropbear: use common random source for ltm
• vpnc: add static routing and def. gateway control
• Revert "vpnc: add static routing and def. gateway control"
• Updated documentation
• Updated documentation
• Revert "Revert "vpnc: add static routing and def. gateway control""
• Updated documentation
• httpd: www: implement notification on low jffs space
• Updated documentation
• build: fix processor count for parallel building
• build: enable parallel building for curl
• build: enable parallel kernel building for SDK6/SDK7 models
• other: fix am_get_webui_page() returning new mount point before matching existing file
• other: optimize am_get_webui_page loop
• Merge pull request #558 from dave14305/patch-1
• webui: fixed typo on low JFFS notification
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• Merged GPL + binary blobs 384_81981 for RT-AC5300
• bwdpi: merged bwdpi components from 385_20630 firmware image for RT-AC68U
• rc: httpd: harmonize httpd/vsftpd cert storage handling with upstream
• Merged GPL + SDK 384_81992 from RT-AC86U
• httpd: only save certificate if self-generated
• webui: update cert info display to be in-line with httpd/rc changes from 7917e3b
• Updated documentation
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• rom: fix duplicate CA bundle, and keep the updated one
• httpd: don't set tlscrypt nvram when parsing tls-crypt from an imported ovpn, this is only used by Asus.
• libvpn: implement copy_ovpn_key()
• rc: improve handling of clock-sensitive services on first WAN up.
• Updated documentation
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• libvpn: fixed log message on OpenVPN start
• libvpn: remove some no longer used defines
• webui: warn user when enabling user/pass auth for an OpenVPN client without providing both
• openvpn: skip DNS redirection for clients using an empty source instead of 0.0.0.0 (the old way of denoting "any")
• shared: fixed bad ipt_account() merge
• webui: report openvpn client error code 7 as a config error, not key/cert
• openvpn: set nvram errno if there is a config error preventing start
• fix typo
• openvpn: second stage of rewrite/refactor; harmonize master with mainline code
• webui: fix incorrect input field validated when applying an OpenVPN client configuration
• libovpn: don't allow duplicate-cn while in non-exclusive config-dir mode
• libovpn: also reapply DNS and QOS firewall rules when re-applying firewall rules
• rc: ensure that if openvpn client failed to start, that the instance gets set into an error state
• rc: let openvpn down event handler update dnsmasq/resolv config
• libovpn: remove unused (and inaccurate) constants
• shared: remove vpn_debug nvram (no longer used)
• Updated documentation
• Merge pull request #568 from maghuro/patch-2
• openvpn: remove duplicate line
• webui: fix check for userauth being enabled on OpenVPN client page; separate check/focus for both fields
• dropbear: libtommath: enable fixed cutoffs as size-optimization
• dnsmasq: update to 2.82 (2.82-34-gb309cca-openssl)
• openvpn: third stage - replacement of up/down handlers with libovpn functions, and fixes.
• Updated documentation
• rc: fix bad merge in ovpn.c
• rc: use the correct WAN interface ...

Unstable: 386.00_0-gnuton0_alpha4

Changes from the latest stable gnuton build (384.17_0-gnuton1):

• build: Added circleci config file
• build: updated tools/copy-prebuilt to support DSL-AC68U target
• build: fixed tools/copy-prebuilt script which was copying release/src/router/tuxera/ in the wrong dir
• Merged DSL-AC68U GPL 384.56087 prebuilds
• build: added DSL-AC68U configuration to src-rt make target
• build: fixed build when DUALWAN and DSL are enabled
• Cleaning up remov some 'false' files
• Merged asuswrt 384.56087 GPL to release/src/router/shared/sysdeps/
• Import release/src/router/shared/prebuild/DSL-AC68U/ from GPL asuswrt 384.56087
• create release for each tag type
• tools/copy-prebuilt copies DSL-N55U GPL router/www/sysdep files since they are needed by DSL-AC68U and maybe other DSL variants in the future
• ExtendedNo var is set during compilation when a commit is tagged
• Imported src/router/www/sysdep/DSL-N55U/www/ files from GPL 384.56087 since they are needed by DSL variants
• Merged latest upstream Merlin code
• Sanitize CIRCLE_TAG to be used as EXTEND_NO
• feature: Added let's encrypt to src-rt/target.mak for DSL-AC68U
• Rename CI workflow and ignore master
• Merging new changes imported from RT-AC88U branch
• Merge remote-tracking branch 'upstream/mainline' into dsl-ac68u
• spectrum: imported app for DSL routers from DSL-AC68U GPL 384.56087
• httpd: upstream web.c reverted back since RT GPL is ahead of DSL one
• httpd: Added back get_dnsprivacy_presets
• webui: banner logo link set to gnuton's github
• webui: enabled firmware update checks for gnuton's builds
• fwupdate: FIX new firmwares with alphabetically bigger extendedno are not correcly detected
• Merged asus merlin code
• Merge upstream tag '384.14-beta1-mainline' into dsl-ac68u
• buildfix: httpd/web.c has been checked out from tags/384.13-beta1-mainline
• buildfix: set_fw_path.cgi not available for DSL-AC68U as for RT
• buildfix: do not threat warning as errors for router
• dsl-ac68u: Prebuild imported from GPL_DSL-AC68U_3.0.0.4.384.81140
• Merged RMerl 384.14-beta2-mainline
• buildfix: Backported rc/prebuild/DSL-AC68U/tcode_brcm.o from RT-AC86U since wl_disband5grp symbol was required for building
• Merged in GPL_DSL-AC68U_3.0.0.4.384.81727-g7c23ae8 prebuilds
• Merge tag '384.14-beta3-mainline' into 384.14_beta3
• Merge tag '384.14-mainline' into 384.14
• getdns: provide explicit path to OpenSSL 1.1.1 (fixes regression fom GPL 81044 merge)
• rc: fail wanduck (and possibly other services) failing to start due to ate_mode check
• rstats: revert some of the 384_81044 changes in an attempt to resolve the traffic spikes
• rc: log if router is in manufacturing mode at wanduck launch
• Updated documentation
• rc: fix bad GPL merge
• rc: remove no longer required kludge for STP on HND models
• build: re-add cifs.ko module (lost with GPL 81044 merge)
• webui: hide _0 extendno from firmware versions returned by cfg_sync
• Updated documentation
• Merge tag '384.14_2-mainline' into dsl-ac68u-384.14_2-mainline
• dsl-ac68u: build: fix - picks latest previous tag in case of releases
• Merge tag '384.15-mainline' into dsl-ac68u-384.15
• Merge tag '384.16-mainline' into dsl-ac68u-384.16
• Merge tag '384.17-mainline' into dsl-ac68u-384.17
• curl: fix build recipe when generating configure
• getdns: fix building under Ubuntu 20.04 LTS
• libgpg-error: fix building with gawk 5.0 (backport from upstream)
• Merge pull request #1 from RMerl/master
• Release amtm 3.1.7
• Merge pull request #509 from decoderman/master
• Updated documentation
• dropbear: Fix ssh client connection with Chacha20-Poly1305
• Updated documentation
• Merge GPL + SDK 384_81846 (RT-AC86U)
• Merge RT-AC86U binary blobs from 384_81846
• webui: updates to the QoS Stats page.
• Merge RT-AC68U SDK + binary blobs from 385_20490 (identical code to 384_81846)
• Merge RT-AC5300 binary blobs from 384_81844
• Merge RT-AC3100 SDK + binary blobs from 385_20490
• ahs: add binary collections to ahs/asd/libasc
• rc: update pw_dec() call in openvpn code to the new definition
• webui: optimize draw_conntrack_table() by removing code related to unsupported tQoS mode; fix tQoS default category labeling"
• webui: fix JS syntax error from upstream's Wireless Log page
• Updated documentation
• webui: harmonize dhcp_staticlist length with upstream
• Fix Privacy disclosure Wiki link in README
• httpd: rework gencert.sh script responsible for generating web certificate
• cfg_mnt: update gencfgcert to match updated openssl.cnf config file
• rc: copy stored cert.crt when starting httpds
• httpd: re-implement persistent certificate storage (lost in commit cdfc71f)
• Disable AHS and ASD on all supported models
• webui: remove validator.hostname() to match upstream (and replace one existing use with validator.host_name())
• Merge pull request #525 from borzaka/patch-1
• dropbear: Fix ChaCha20 on 32-bit platforms
• busybox: updated a few options to match upstream settings
• openvpn: revert 81846 change which broke setting ovpn server state to RUNNING
• Update updown-client.sh
• Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)
• Merge pull request #530 from Xentrk/master
• ssl: update root certificates to June 3rd 2020
• Updated documentation
• Revert "Merge RT-AC88U binary blobs from 385_20457 (and two missing RT-AC3100 blobs from 20490)"
• flac: properly provide libogg path (fixes building on some environment)
• openvpn: remove obsolete configure options that no longer exist
• build: parallelize rc and wget building
• www: updated OUI database
• Updated documentation
• webui: fix sorting by DNS field on DHCP reservation table
• Merged GPL + SDK 384_81918 (minus lighttpd changes) for RT-AC86U
• httpd: don't rely on nvram and nvram-stored cert for saving, we already do so at generation time
• rc: add kludge to watchdog for pre-384_81918 SDK 6.37 binary blobs
• Updated documentation
• Updated documentation
• shared: added missing shared blobs for RT-AC3100
• dropbear: update to 2020.79
• Merged RT-AC5300 binary blobs from 384_81902
• lighttpd: merge updated components + code from 384_819xx
• Removed obsolete LE lighttpd instance
• openvpn: store empty field instead of 0.0.0.0 in policy rules
• Updated documentation
• nano: updated to 4.9.3
• Updated documentation
• Updated documentation
• Merged RT-AC88U binary blobs from 384_81919
• rc: revert RT-AC88U kludge in watchdog
• rc: eliminate log spam occuring every four seconds while testing RTK switch status
• rom: hardcode wget timeout value in firmware update check scripts
• dropbear: update to 2020.80
• dropbear: use common random source for ltm
• vpnc: add static routing and def. gateway control
• Revert "vpnc: add static routing and def. gateway control"
• Updated documentation
• Updated documentation
• Revert "Revert "vpnc: add static routing and def. gateway control""
• Updated documentation
• httpd: www: implement notification on low jffs space
• Updated documentation
• build: fix processor count for parallel building
• build: enable parallel building for curl
• build: enable parallel kernel building for SDK6/SDK7 models
• other: fix am_get_webui_page() returning new mount point before matching existing file
• other: optimize am_get_webui_page loop
• Merge pull request #558 from dave14305/patch-1
• webui: fixed typo on low JFFS notification
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• Merged GPL + binary blobs 384_81981 for RT-AC5300
• bwdpi: merged bwdpi components from 385_20630 firmware image for RT-AC68U
• rc: httpd: harmonize httpd/vsftpd cert storage handling with upstream
• Merged GPL + SDK 384_81992 from RT-AC86U
• httpd: only save certificate if self-generated
• webui: update cert info display to be in-line with httpd/rc changes from 7917e3b
• Updated documentation
• openssl11: also prioritize chacha20 for bcm675x models which lack AES acceleration
• rom: fix duplicate CA bundle, and keep the updated one
• httpd: don't set tlscrypt nvram when parsing tls-crypt from an imported ovpn, this is only used by Asus.
• libvpn: implement copy_ovpn_key()
• rc: improve handling of clock-sensitive services on first WAN up.
• Updated documentation
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• openvpn: Major implementation rewrite/refactor
• webui: OpenVPN client fixes
• libvpn: fixed log message on OpenVPN start
• libvpn: remove some no longer used defines
• webui: warn user when enabling user/pass auth for an OpenVPN client without providing both
• openvpn: skip DNS redirection for clients using an empty source instead of 0.0.0.0 (the old way of denoting "any")
• shared: fixed bad ipt_account() merge
• webui: report openvpn client error code 7 as a config error, not key/cert
• openvpn: set nvram errno if there is a config error preventing start
• fix typo
• openvpn: second stage of rewrite/refactor; harmonize master with mainline code
• webui: fix incorrect input field validated when applying an OpenVPN client configuration
• libovpn: don't allow duplicate-cn while in non-exclusive config-dir mode
• libovpn: also reapply DNS and QOS firewall rules when re-applying firewall rules
• rc: ensure that if openvpn client failed to start, that the instance gets set into an error state
• rc: let openvpn down event handler update dnsmasq/resolv config
• libovpn: remove unused (and inaccurate) constants
• shared: remove vpn_debug nvram (no longer used)
• Updated documentation
• Merge pull request #568 from maghuro/patch-2
• openvpn: remove duplicate line
• webui: fix check for userauth being enabled on OpenVPN client page; separate check/focus for both fields
• dropbear: libtommath: enable fixed cutoffs as size-optimization
• dnsmasq: update to 2.82 (2.82-34-gb309cca-openssl)
• openvpn: third stage - replacement of up/down handlers with libovpn functions, and fixes.
• Updated documentation
• rc: fix bad merge in ovpn.c
• rc: use the correct WAN interface ...