Opkg update fails - wget: SSL support not available,

[richb-hanover-priv]

I just upgraded my trusty WNDR3800 from 23.05.5 to 24.10.0 using luci-app-attendedsysupgrade.

To make the sysupgrade work, I had to use Advanced mode and remove the auc and wolfssl* packages. (Those packages seem not to have been built for 24.10.0, so they don't exist and caused the ASU server to give an error.)

Now the router is working on 24.10.0, BUT... opkg update fails with messages like this:

Downloading https://downloads.openwrt.org/releases/24.10.0/packages/mips_24kc/telephony/Packages.gz
wget: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
*** Failed to download the package list from https://downloads.openwrt.org/releases/24.10.0/packages/mips_24kc/telephony/Packages.gz

How can I get better? I imagine that I need to wget http://something..., then opkg install ...that thing... but I don't know what to do.

Please give me a hint for ssh commands to get out of this pickle. Thanks.

[richb-hanover-priv]

Figured it out myself... Use the Attended Sysupgrade web GUI to add libustream-mbedtls to the list of packages, rebuild the image and flash it. (I checked and ca-bundle was already installed.)

[efahl]

Alternatively, I think you can just edit /etc/opkg/distfeeds.conf and change all the entries to http:// to re-enable opkg without an ssl package. Then install libwhatever and certs, restore https and off to the races.

[richb-hanover-priv]

I think that would have worked as well. Thanks!