Login  Register

Re: DROWN attacks vs openssl

Posted by user8446 on Mar 02, 2016; 7:49pm
URL: https://itus.accessinnov.com/DROWN-attacks-vs-openssl-tp255p257.html

First, use the latest fw_upgrade script version that forces TLS1.0 connections and above: http://itus.accessinnov.com/Update-script-fw-upgrade-td43.html

Second, update your openSSL version to 1.0.2g:

In /etc/opkg.conf add these lines at the end:

arch cn70xx 100
arch octeon 200
arch all 300

Download the new version from here:
https://downloads.openwrt.org/chaos_calmer/15.05/octeon/generic/packages/base/openssl-util_1.0.2g-1_octeon.ipk

Update it:
opkg install ../openssl-util_1.0.2g-1_octeon.ipk
Running the latest OpenWrt stable release