TomatoUSB

Hi.

I've just updated to version "tomato-E4200USB-NVRAM60K-1.28.RT-N5x-MIPSR2-104-AIO" of the tomatousb firmware from a pretty old version and am very glad to see the pptp vpn server config now in the web gui.

I have been using the pptp vpn from a script for a while now, but when upgrading I noticed that my existing password would not work because it contains @#$ or one of those special characters.

I believe the fix is a pretty easy one, to allow all characters as passwords. In the '/tmp/pptpd/chap-secrets' file the password should be surrounded by quotes like so (as per man pppd):
chris * "@password#" *
…

If i manually edit the chap-secrets file, it works perfectly - would it be possible to fix the gui to add the quotes to the chaps secret file?

Thanks
Chris

I so hope that someone is listening to this… Passwords just HAVE to have special characters, or they are way too easy to crack

Please, someone like Shibby or all you wonderful Tomato guys, lets be as safe as we can be out there in the evil internet.
Happy Holidays everyone.

Passwords just HAVE to have special characters, or they are way too easy to crack

That is very highly subjective. A password like the following is just as "hard" or will take very very long to crack:

"I am the Passphrase that is very hard to crack so don't waste your time cracking it"

You are correct in that a long sentence can achieve a good result, but..
Passwords by normal users are expected to be 1 word, and pronouncable.
Password wordlist using 8-12 digits with just letters size = .5gig
Password wordlist using 8-12 digits with letters numbers and symbols = 3.5gig
Much harder to crack when you can't store the wordlist anywhere….

And besides, a couple quotes in the code aint no big deal to fix this.
as it is normal practice to use letters numbers and symbols nobody wants to change their password to accomodate this limitation of the gui.