This topic has been marked solved and closed to new posts due to inactivity. We hope you'll join the conversation by posting to an open topic or starting a new one.
NG needs to get its s together when cutomers are coming up with a fix. Is the elite tech support incompetent or sitting on their a while we wait and wait for a solution?
So, decided to use ASUS-Merlin by Vortex for my R7000. It has VPN, and guess what, when it genrates certificates and keys it uses 1024bit, SHA256 signed certificate, and negotiates with AES-128-GCM/AES-256-GCM/AES-128-CBC/AES-256-CBC keys by default, but I can generate my own and paste them in if I want as well.
So, decided to use ASUS-Merlin by Vortex for my R7000. [...]
Seems ASUS has it all together.
Well, that's disappointing, because I just retired my Asus because of WiFi instability and lockups. How did you decide that firmware would run on the R7000?
Nice, thanks for the info, downloaded the package, will see if I feel like reconfiguring my router just now or would rather wait a bit for a hypothetical update from NG...
FYI NG is so far ignoring any attempt I make to get them to thumbs up me posting a guide for their own firmware, so if you guys still want that feel free to hit up your favorite moderators and see if you have any better luck...
It only takes a few mins to fix. NG has not fixed the problem voluntarily and the MD5 issue has benn known for a long time. Yet NG continues to market its routers OpenVPN feature. That is direlection of duty. In fact, NG should be sued. Filing a complaint with the BBB is a preliminary step to prove on paper NG is ignoring the problem even after inquiry using a third party. This is a first step leading up to dropping the atom bomb (class action lawsuit seeking remedies) on them.
i got a response from NG via the BBB complaint. they opened a case for me and now i just need to get them info about my router. will see if anything happens from there.
wrote: I don't know what the forum rules are, didn't find any link to them.
I don't think you will get a reply from NETGEAR staff!
Every time this forum have discussion on the firmware of NG about the OpenVPN security issue, they won't have positive reply.
You can find a similar case to the discussion of OpenVPN certificate which can never be changed with NETGEAR firmware.
Now everyone know that OpenVPN have changed the policy that it will no longer support MD5 certificate / encryption after April 30. This warning message display clearly in the updated edition of OpenVPN connect for Android phone! How come NETGEAR have no plan to change its firmware?
I don't see this warning with OpenVPN connect in iPad. Anyone know the case of iPhone?
My router is R6220. I think all NETGEAR router have the same issue.
I opened a case with support a long time ago. In an awkward realization, I see that I can't read any of the old history of the case, nor see when it was opened.
They don't know if it will fix the problem? My update back to the case was that I don't want to downgrade to test for them, and asked when they were going to fix this problem.
Model: R7000P|Nighthawk AC2300 Smart WiFi Router with MU-MIMO
It always lists security. It's completely f***ing meaningless since NG won't say what security issues they addressed and thus you also can't know which they did not address.
Worst. Release notes. Ever.
They should be ashamed. No company serious about security would do this.
I'll try to get my instructions up this weekend. Sorry, I've been busy with work and I just gave up dealing with the router the past few weeks since NG took so long to address the firmware stability, I lost interest.
I received a phone call from Netgear L2 Expert support.
The change in OpenVPN certs has been accomplished for some Netgear routers, and will be finished for the R7900P before the drop dead date for Android OpenVPN.
I asked which routers had already been updated, and she couldn't tell me.
My R7000P Firmware Version V1.3.0.20_10.1.1 has a 2018-01-23 15:12 R7000P-V1.3.0.20_10.1.1.chk I looked at the opensource download, and it has a 2018-02-15 10:16:03 V1.3.0.10_1.2.2_gpl, so there is something newer underway.
It still has an MD5 ca.crt, though.
Model: R7000P|Nighthawk AC2300 Smart WiFi Router with MU-MIMO
That's interesting. As a status update, I have spent many hours this week already writing a guide, I have to fit it in around work/life. I hope to have something up here in the next few days.
I submitted an email support request to Netgear yesterday asking when they plan to release a new firmware with an updated OpenVPN server build that uses SHA256 instead of MD5 signing algorithm, but I've yet to receive any useful info.
