Ξ welcome to cryptostorm's member forums ~ you don't have to be a cryptostorm member to post here Ξ
Ξ any OpenVPN configs found on the forum are likely outdated. For the latest, visit here or GitHub Ξ
Ξ If you're looking for tutorials/guides, check out the new https://cryptostorm.is/#section6 Ξ

Search found 24 matches

by cryptomon
Tue Nov 13, 2018 12:07 pm
Forum: guides, HOWTOs & tutorials
Topic: ASUS router stock firmware OpenVPN working.
Replies: 7
Views: 15001

Re: ASUS router stock firmware OpenVPN working.

Wow, I got that to work now using the custom section at the base of the VPN config page to redirect to the /jffs file as you suggested. Thanks.
by cryptomon
Tue Nov 13, 2018 11:14 am
Forum: privacy seppuku: data, tasks, brainstorming
Topic: cryptostorm: Cryptocloud's seppuku & rebirth
Replies: 13
Views: 43346

Re: cryptostorm: Cryptocloud's seppuku & rebirth

Why dig up a post that is 5 years old and re-post the entire content?
by cryptomon
Thu Oct 18, 2018 7:04 am
Forum: general chat, suggestions, industry news
Topic: Token Hashing - OpenVPN user input
Replies: 24
Views: 40497

Re: Token Hashing - OpenVPN user input

see if the router actually stores the credentials in a file somewhere, rather than a database. It does store the credentials in a file called the "up" file. Whilst I can write to this file using "vi" and have it save a long hash, it's not persistent. The directory itself (/tmp/e...
by cryptomon
Wed Oct 17, 2018 3:47 am
Forum: general chat, suggestions, industry news
Topic: Token Hashing - OpenVPN user input
Replies: 24
Views: 40497

Re: Token Hashing - OpenVPN user input

parityboy wrote:Could you try inspecting the HTML


Yes, but the right click "Inspect Element" already says "maxlength"=255, so I don't think that is the issue in the firmware code. I can paste the long string into the box but it won't stick.
by cryptomon
Tue Oct 16, 2018 4:41 am
Forum: general chat, suggestions, industry news
Topic: Token Hashing - OpenVPN user input
Replies: 24
Views: 40497

Re: Token Hashing - OpenVPN user input

ebpf-ftw wrote:Very late but it seems not to have been mentioned.
....
auth-user-pass /jffs/filename

start openvpn.


Tried this without success. Substituting a file for GUI inputs doesn't seem an option. However, there may be a subtle method to achieve this I'm so far unaware of.
by cryptomon
Tue Oct 16, 2018 4:34 am
Forum: guides, HOWTOs & tutorials
Topic: ASUS router stock firmware OpenVPN working.
Replies: 7
Views: 15001

Re: ASUS router stock firmware OpenVPN working.

cryptomon wrote:the suggestion of modifying the "Inspect Element"

ebpf-ftw wrote:Very late but it seems not to have been mentioned.


I've now looked at both these ideas but couldn't get either to work.
by cryptomon
Sun Oct 14, 2018 5:46 am
Forum: guides, HOWTOs & tutorials
Topic: ASUS router stock firmware OpenVPN working.
Replies: 7
Views: 15001

Re: ASUS router stock firmware OpenVPN working.

An interesting topic that I also queried here.. https://cryptostorm.org/viewtopic.php?p=18499#p18499 Although I haven't yet tried the suggestion of modifying the "Inspect Element" by the original poster of this topic, this is a reply I got which also looks like an alternative approach... V...
by cryptomon
Sun Oct 14, 2018 5:16 am
Forum: member support & tech assistance
Topic: New configuration files - my setup issues
Replies: 3
Views: 4165

Re: New configuration files - my setup issues

That sounds about right because a day or two later later I started getting the okay (green colour) from the web checks. I notice also from my output that there are now about 2368 exit node IP addresses from CS plus the 28 resolvers. This is an impressive list. As far as UFW goes I haven't found a be...
by cryptomon
Fri Oct 12, 2018 4:35 am
Forum: member support & tech assistance
Topic: New configuration files - my setup issues
Replies: 3
Views: 4165

New configuration files - my setup issues

So I've updated to the new ECC configuration files using openvpn. A bit confused as to whether I should be using the default /ecc, /ed448 or /ed25519. Is this just personal preference based on the papers written about them? My firewall settings are unchanged, but now the check page says I'm not conn...
by cryptomon
Thu Jun 07, 2018 6:53 am
Forum: general chat, suggestions, industry news
Topic: Token Hashing - OpenVPN user input
Replies: 24
Views: 40497

Re: Token Hashing - OpenVPN user input

I was actually trying to use VMM as you suggested but got lost on what should be bridged or otherwise for the nic. Virsh cmd line is fine if it makes things more direct to configure. How and what were virtbr0 and virtbr0-nic created when I installed OPNsense? Trying to set up similar to parityboy's ...
by cryptomon
Wed Jun 06, 2018 7:02 pm
Forum: general chat, suggestions, industry news
Topic: Token Hashing - OpenVPN user input
Replies: 24
Views: 40497

Re: Token Hashing - OpenVPN user input

Thanks for the contribution. I'll give it a go next opportunity. Although now I've discovered OPNsense and similar arrangements, I think this might be a better direction to go. I tried to set one up as a virtual machine as suggested by Parityboy above but failed trying to use QEMU and KVM rather tha...
by cryptomon
Thu Mar 29, 2018 7:40 am
Forum: general chat, suggestions, industry news
Topic: Token Hashing - OpenVPN user input
Replies: 24
Views: 40497

Re: Token Hashing - OpenVPN user input

@cryptomon When he moved the VPN connection to his Mac Mini,... That's an interesting observation. So I need to find some Linux friendly hardware like the Mac Mini that I can install this BSD firewall software onto like pfsense or OVPsense. I'm sure the Mac works well for him, but I'm not a Mac per...
by cryptomon
Thu Mar 29, 2018 7:34 am
Forum: member support & tech assistance
Topic: DNS configuration / usage
Replies: 6
Views: 11732

Re: DNS configuration / usage

EDIT: I just saw this , so I have a better understanding of where it gets the DNS server IP addresses from (I think, lol). Yeah, so I noticed that the list of resolvers from that web page you gave contain the same list as provided by CS dnscrypt-resolvers.csv . By entering this list into the dnscry...
by cryptomon
Tue Mar 27, 2018 8:45 am
Forum: member support & tech assistance
Topic: DNS configuration / usage
Replies: 6
Views: 11732

Re: DNS configuration / usage

5. Yes. The addresses in dnscrypt-resolvers.csv are publicly contactable outside of the VPN tunnel, so using one to resolve the domain name of an exit node is a sensible idea. Not sure you mean one only ever, or one of the many to choose from in a random sense... So having set up dnscrypt2 ( https:...
by cryptomon
Tue Mar 27, 2018 7:09 am
Forum: general chat, suggestions, industry news
Topic: Token Hashing - OpenVPN user input
Replies: 24
Views: 40497

Re: Token Hashing - OpenVPN user input

What's your connection speed? I know what you are thinking....but unfortunately nothing special, 100Mb is possible if you pay for it, but I just use the slowest speed. In reality I only get about 5-50% of that speed on a good day. Provider congestion/over subscription has a lot to do with it. The p...
by cryptomon
Mon Mar 26, 2018 9:05 am
Forum: general chat, suggestions, industry news
Topic: Token Hashing - OpenVPN user input
Replies: 24
Views: 40497

Re: Token Hashing - OpenVPN user input

Yes it can run on the same PC (which is what I do) which will have a lot more horsepower for encryption than a domestic router will. Appreciate the input. (I seem to learn find new things all the time ever since going down the CS route. A great learning experience.) I had to read it a few times to ...
by cryptomon
Mon Mar 19, 2018 4:50 am
Forum: member support & tech assistance
Topic: New openVPN ECC config files
Replies: 5
Views: 12494

Re: New openVPN ECC config files

I must have missed something, .... Is this still okay for Linux? My apologies, it turns out I didn't read the entire comments in the .ovpn files, which did provide further insights.... Quote: # Even though the hostname below says "windows", the configuration for # these ECC instances are ...
by cryptomon
Sun Mar 18, 2018 2:09 pm
Forum: member support & tech assistance
Topic: New openVPN ECC config files
Replies: 5
Views: 12494

New openVPN ECC config files

I must have missed something, is there somewhere one can read up about the new ECC config files? (https://github.com/cryptostorm/cryptostorm_client_configuration_files) I've worked out it stands for eliptic-curve-cryptography and from the readme: "provide the best/strongest crypto available to ...
by cryptomon
Sun Mar 18, 2018 12:52 pm
Forum: general chat, suggestions, industry news
Topic: Token Hashing - OpenVPN user input
Replies: 24
Views: 40497

Re: Token Hashing - OpenVPN user input

So as a work around I have just downgraded back to the previous firmware version 380.69-2.

In the mean time I might give OPNsense a try once I've found suitable low power hardware for it. Open to suggestions here...
by cryptomon
Fri Mar 02, 2018 11:18 am
Forum: member support & tech assistance
Topic: DNS configuration / usage
Replies: 6
Views: 11732

Re: DNS configuration / usage

I note that the new v2 setup is a bit different to v1 and manual modification of the resolv.conf file is not required. It is automatically updated with nameserver 127.0.0.1 Sorry my mistake, this is not correct. I use dhcpcd service so to make the DNS (127.0.0.1) listed in resolv.conf file persiste...
by cryptomon
Mon Feb 26, 2018 2:06 pm
Forum: general chat, suggestions, industry news
Topic: Token Hashing - OpenVPN user input
Replies: 24
Views: 40497

Re: Token Hashing - OpenVPN user input

@OP As for alternative firmware, I have a physical ADSL router which is untouched, but "behind" it I run a virtualised instance of pfSense. I also have a couple instances running LEDE and OpenWRT but they are just for testing purposes, nothing serious. :) This sounds like an interesting a...
by cryptomon
Mon Feb 26, 2018 9:09 am
Forum: member support & tech assistance
Topic: DNS configuration / usage
Replies: 6
Views: 11732

Re: DNS configuration / usage

That does help, thank you. It seems as long as I look at this stuff I never seem to fully conquer it, but I think I'm getting there. I do find it all very intriguing despite the learning curve. I created bash scripts to automate the install and configuration and corresponding UFW settings, so life i...
by cryptomon
Sat Feb 24, 2018 6:02 pm
Forum: general chat, suggestions, industry news
Topic: Token Hashing - OpenVPN user input
Replies: 24
Views: 40497

Token Hashing - OpenVPN user input

So I use an ASUS router and have the option to setup OpenVPN in it using Asuswrt-Merlin firmware. Recently, ASUS updated their firmware (v384.3) to restrict the username and password to be 64 characters max each. I notice that the hash is 128 char long. Is this always the case? If so, would it be a ...
by cryptomon
Fri Feb 23, 2018 11:46 am
Forum: member support & tech assistance
Topic: DNS configuration / usage
Replies: 6
Views: 11732

DNS configuration / usage

DNS settings - I have questions (sorry for the length and basic context). I use Linux with openVPN that is configured with systemd and firewall UFW. 1. Does it matter whether one uses openDNS (e.g. 208.67.222.222, 208.67.220.220) or the VPN entry IP address? (I use the openDNS IPs because they seeme...

Go to advanced search

Nothing to display.

Login