Live data from Hacker News

OpenWrt 23.05

openwrt.org

1–10 of 84 posts

Re: OpenWrt 23.05

#3
"2 Gbps WAN/LAN NAT Routing on ramips MT7621 devices (See OpenWrt forum)"

I own a few Mikrotik HEXs boxes: now they were just upgraded from 0,5Gbps to 2Gbps! Wow!

Re: OpenWrt 23.05

#4

  OpenWrt has transitioned its default cryptographic library from wolfssl to mbedtls. This shift brings several changes and implications: 

  * Users should be aware that mbedtls 2.28 no longer supports TLS 1.3.
Am I reading this correctly? They switched to a different tls library that doesn't support TLS 1.3?

Re: OpenWrt 23.05

#6
post #4

OpenWrt has transitioned its default cryptographic library from wolfssl to mbedtls. This shift brings several changes and implications: * Users should be aware that mbedtls 2.28 no longer supports TLS 1.3. Am I reading this correctly? They switched to a different tls library that doesn't support TLS 1.3?

By default, yes. But if you read the next paragraph:

"While mbedtls is now the default, users who have specific needs or preferences can still manually switch back to wolfssl or choose openssl."

Re: OpenWrt 23.05

#7
post #3

"2 Gbps WAN/LAN NAT Routing on ramips MT7621 devices (See OpenWrt forum)" I own a few Mikrotik HEXs boxes: now they were just upgraded from 0,5Gbps to 2Gbps! Wow!

Not really true. From 500/500 to 1000/1000.

Re: OpenWrt 23.05

#8
post #4

OpenWrt has transitioned its default cryptographic library from wolfssl to mbedtls. This shift brings several changes and implications: * Users should be aware that mbedtls 2.28 no longer supports TLS 1.3. Am I reading this correctly? They switched to a different tls library that doesn't support TLS 1.3?

It's work in progress: https://github.com/Mbed-TLS/mbedtls/blob/development/docs/ar...

Newer version have okay-ish support, I'd guess the next OpenWRT release will have it again.

Re: OpenWrt 23.05

#10
post #6
post #4

OpenWrt has transitioned its default cryptographic library from wolfssl to mbedtls. This shift brings several changes and implications: * Users should be aware that mbedtls 2.28 no longer supports TLS 1.3. Am I reading this correctly? They switched to a different tls library that doesn't support TLS 1.3?

By default, yes. But if you read the next paragraph: "While mbedtls is now the default, users who have specific needs or preferences can still manually switch back to wolfssl or choose openssl."

I did read the next paragraph - I just didn't quote it because it wasn't relevant to my question. :-D
Post reply on HN