Q: Does dd-wrt client play well with Access Server or not?
This post says that it
should work ... if you have firmware from BrainSlayer branch
http://docs.openvpn.net/frequently-asked-questions/using-dd-wrt-with-openvpn-access-server/
This dd-wrt bug thread says that it got broken in BrainSlayer dd-wrt releases in mid-2012 ... and
is still broken.
http://svn.dd-wrt.com/ticket/2536
I was unable to locate references to this specific problem in these OpenVPN forums.
more gory details ...
AWS EC2 OpenVPN Access Server Appliance 2.0.2
dd-wrt with BrainSlayer release 19342
http://www.dd-wrt.com/dd-wrtv2/downloads/others/eko/BrainSlayer-V24-preSP2/2012/06-08-12-r19342/broadcom_K26/dd-wrt.v24-19342_NEWD-2_K2.6_mega.bin
I already had this BrainSlayer release running on my router. I knew that it wasn't the latest, but I thought I would try before attempting/risking a dd-wrt firmware upgrade.
The failure mode I observed is:
2014-01-19 14:04:52-0800 [-] OVPN 1 OUT: 'Sun Jan 19 22:04:52 2014 76.179.73.252:32769 TLS_ERROR: BIO read tls_read_plaintext error: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac'
2014-01-19 14:04:52-0800 [-] OVPN 1 OUT: 'Sun Jan 19 22:04:52 2014 76.179.73.252:32769 TLS Error: TLS object -> incoming plaintext read error'
2014-01-19 14:04:52-0800 [-] OVPN 1 OUT: 'Sun Jan 19 22:04:52 2014 76.179.73.252:32769 TLS Error: TLS handshake failed'
2014-01-19 14:04:52-0800 [-] OVPN 1 OUT: 'Sun Jan 19 22:04:52 2014 76.179.73.252:32769 SIGUSR1[soft,tls-error] received, client-instance restarting'
I expected to do a dd-wrt firmware upgrade and get this resolved. Instead, I am puzzled.
This dd-wrt trouble ticket described my problem:
http://svn.dd-wrt.com/ticket/2536
My read of the thread is that it got broken approx May 2012 ... approx svn release 19210 ... and is still broken
There are some "configuration workarounds" that are suggested, but I am not willing to play with the configuration on my shiny-new OpenVPN Access Server Appliance.
Therefore, it makes me wonder whether the using-dd-wrt-with-openvpn-access-server FAQ (last updated Nov 2013) is correct.
I have some other routers that are capable of running dd-wrt and I willing to test it out ... but I don't want to just waste time.
Q: Does anyone know if the dd-wrt OpenVPN client actually works with the Access Server or not?
Thanks,
Michael
