NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
Netgear R7000 and OpenVPN for Android App
Hi, since last OpenVPN for Android App update (v.0.6.73) downloadable at the following link: https://play.google.com/store/apps/details?id=de.blinkt.openvpn OpenSSL version was upgraded to 1.1 and...
Thanks everyone for feedback so far. Attached is version 1.0.1. I fixed some typos, added a suggestion to clean up your tftp folder when you're done, and made a note about the OpenVPN version that's most compatible with the document.
Some users looking to work through this doc may find that they can avoid Step 1 by visiting this hidden page:
If the debug page loads and there is an "Enable Telnet" option then you got lucky. Note that either the debug page or the option to "Enable Telnet" may not exist on your device or firmware version. Remember to check that this option is disabled after you're finished because having telnet enabled is a security risk.
THANK YOU!!!
I just went through the instructions and it worked great. You clearly spent some time on this and I appritiate it.
For others out there: Here are a few notes on my experiene:
- Hidden Page for Telnet.I got to the hidden page, but my router (R7000 Nighthawk AC1900) did not have a button to enable telnet.
- The process requires Python 2.7.
I initially tried using Python 3.x because it was already on my system..... but installing pycrypto did not work till I installed Python 2.7. (I should have followed the instructions :-\) - IP Address of the router
The instructions kinda assume the default IP address of the router of 192.168.1.1. My address range is different but the instructions were clear enough that it was easy to deal with.
- OpenVPN tools version
The instructions stress that they are for OpenVPN tools version 2.4.4 and if you used a different version things might look different. I used version 2.4.5 and saw absolutely no differences. - Step 3.c is optional.
I skipped it. - In Step 3.e, tells you to copy 'keys\dh4096.pem'.
On my system the file was named keys\dh2048.pem. This is probably because I skipped step 3.c
Hi pthorvald,
Indeed an update to OpenVPN has been released. I'll probably end up updating the doc to match it but haven't had time yet -- busy work schedule. I noticed that they say they patched the easy-rsa scripts, which is probably what led to you getting "dh2048.pem".
If anyone else is looking for the 2.4.4 installer to match the doc exactly in the meantime, the download is here:
http://build.openvpn.net/downloads/releases/openvpn-install-2.4.4-I601.exe
Glad you got your router patched up! :)
Hi Diggie3,
Thanks for the quick response!!
> If anyone else is looking for the 2.4.4 installer.......
I guess I did not scroll down the page far enough to find version 2.4.4 of the OpenVPN stuff.... thanks for publishing the link. It is bound to help others find the right version.
> I noticed that they say they patched the easy-rsa scripts, which is probably what led to you getting "dh2048.pem
Interesting..... it did not even occure to me that the OpenVPN version might have caused the difference.....but it certainly makes sense.
Once again, thankyou for publishing your instructions. You were able to make the task possible for us mere mortals!
I have been lurking in this thread for the solutions from Netgear's firmware upgrade to solve the MD5 issue. After endless wait for their part and looking like there won't be such a postive outcome. So I took the action with the helpful tutorial from Diggie3 and finally sucessfully setup with the proper SHA256 signed certificates.
Here I would like to express my graditude to Diggie3 for setting up such a helpful and details tutorials, eventhough the procedure seems daunting, but with such details in explanations and the many helpful pictures attached. I was in no time come into any difficulty at all. Eventhough it took me quite few hours, and take breaks in between to digest the different stages of the operations :) At the end. it all come good with the new OPENVPN server function like before but with the new certificates.
Once again I like say as many thanks as i could to Diggie3 for your helps here. I advise those who still are sitting at the fence to wait for Netgear's team for the solution to give it a try.
Thanks Diggie3 for putting together that comprehensive manual! I haven't tried it yet, though. :( I have a back-up OpenVPN setup on a Raspberry pi if Netgear doesn't follow through by April 30. Not being critical, but just FYI I did notice on Page 15 that although I see a copy command on the screen grab of the screen, it is not listed in the list of commands in the text.
- stereoptic hey, you're right! I'll put it on the shortlist of things to fix! Appreciate the note!