I just provisioned my 2nd OpenWRT router, so I'll stay here a while
And just this week, I told my pupils that keeping your software up-to-date is the most important security measure you can take. But with OpenWRT it does not seem to be that easy: When I started, I installed luci-ssl on my 1st router, because, basically that's what you are supposed to do...
After an upgrade from 19.07.1 to .2, I was confused, why SSL didn't work anymore. It was (thanks to @psherman) the fact that I didn't reinstall the package after upgrading my router. But then I was confused, like: you're a CCNA, MCSE and MCT (brag), why didn't you figure this out yourself?
Well, mainly because there is a chapter Troubleshooting and maintenance on the main Wiki, which I read. The only problem is that there is no "Maintenance" section!
Reading a bit further I discovered that there are a couple of ways you can take, to mitigate this issue:
- Update packages (though this post definitely discourages that, at least for snapshot-releases): Updating packages in the current version, this would be most useful for security-related updates (is there a way to find automatically out about those?). Also, in Luci, is there no "Install all" button? You actually assume users who update once a Month to install all updates separately? Also, is there a way to automatically install security updates only? Personally, I'd rather be offline, than compromised.
- Upgrade your distribution from 19.07.3 to 19.07.4, that's where I would like to see something like:"reinstall your additional packages" and you may find them using a 5-line shell script. Weird, but better then nothing...
- For me, with 2 Routers and various additional packages expected, I probably should go the "build environment" route. I leave that for later. But I assume that I can have different configuration for my different targets? Like: this is a LTE Router and this is my LAN Access point?
- Run an image-distribution server somewhere on the Internet. For me that would be overkill, but should be mentioned.
As with a lot a projects, the software is OK, but documentation is lacking. So, if I were to be a tech-savy person, interested in giving back to the community, how would I go about it?