openvpn under Linux - just stops working

[geckoFeet]

Hi, and HELP!

I had openvpn working under linux (openSuse 11.4), all behaving very nicely, stopping when I asked it to stop and starting when I asked it to start. Then, with no changes to any files or anything else, it refused to start. Or, rather, it says it starts, but there's no tunnel or /dev/tun0 or anything at all, not even any error message in the terminal window (I control the thing with /etc/init.d/openvpn start> or <... restart> or <... stop>). Message from /var/log/ is:

Mar 30 23:49:48 gecko openvpn[10078]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mar 30 23:49:48 gecko openvpn[10078]: WARNING: file 'geckoFeet.key' is group or others accessible
Mar 30 23:49:48 gecko kernel: [ 1584.664648] SFW2-INdmz-ACC IN=eth0 OUT= MAC=01:00:5e:7f:ff:fa:00:23:cd:fd:b1:6

I don't even know where to start looking for any clues. Please help!

[Reuben]

Could you try uninstalling and then reinstalling OpenVPN via YAST?

[geckoFeet]

Un- and re-installed; no change. Alas!

[Reuben]

Does this happen with all configs? Which config are u connecting to? Please paste the contents of that .conf or .ovpn file here.

[geckoFeet]

It's just the stock bolehroute.opvn:

client
dev tun
proto udp
route-method exe
route-delay 3

# Server List
#BolehRoute UK #1
remote apache.bolehvpn.net 443
#BolehRoute UK #2
remote geronimo.bolehvpn.net 443
#BolehRoute EU #3
remote cochise.bolehvpn.net 443
#BolehRoute EU #4                                                                                                               
remote br4.bolehvpn.net 443
#BolehRoute UK #5
remote br5.bolehvpn.net 443
#BolehRoute UK #6
remote br6.bolehvpn.net 443

remote-random

resolv-retry 10
nobind

persist-key
#persist-tun
keepalive 3 10

ns-cert-type server

# Set log file verbosity.
verb 1

# Silence repeating messages
mute 20

#User Info
ca ca.crt
cert geckoFeet.crt
key geckoFeet.key

[Reuben]

Are there any other logs in /etc/openvpn ?

[geckoFeet]

no logs there; only in /var/log/messages; here's the last part of that, after

gecko:/etc/openvpn # /etc/init.d/openvpn status

(which returns "running" in the terminal window):


Apr  1 11:24:36 gecko openvpn[29678]: Re-using SSL/TLS context
Apr  1 11:24:37 gecko openvpn[29678]: UDPv4 link local: [undef]
Apr  1 11:24:37 gecko openvpn[29678]: UDPv4 link remote: 92.48.112.68:443
Apr  1 11:24:48 gecko openvpn[29678]: [server] Inactivity timeout (--ping-restart), restarting
Apr  1 11:24:48 gecko openvpn[29678]: SIGUSR1[soft,ping-restart] received, process restarting
Apr  1 11:24:49 gecko kernel: [81737.438263] SFW2-INdmz-ACC IN=eth0 OUT= MAC=01:00:5e:7f:ff:fa:00:23:cd:fd:b1:62:08:00 SRC=192.168.0.120 DST=239.255.255.250 LEN=312 TOS=0x00 PREC=0x00 TTL=1 ID=39967 PROTO=UDP SPT=1025 DPT=1900 LEN=292
Apr  1 11:24:50 gecko openvpn[29678]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Apr  1 11:24:50 gecko openvpn[29678]: Re-using SSL/TLS context
Apr  1 11:24:50 gecko openvpn[29678]: UDPv4 link local: [undef]
Apr  1 11:24:50 gecko openvpn[29678]: UDPv4 link remote: 212.117.176.3:443
Apr  1 11:24:51 gecko openvpn[29678]: event_wait : Interrupted system call (code=4)
Apr  1 11:24:51 gecko openvpn[29678]: OpenVPN STATISTICS
Apr  1 11:24:51 gecko openvpn[29678]: Updated,Fri Apr  1 11:24:51 2011
Apr  1 11:24:51 gecko openvpn[29678]: TUN/TAP read bytes,0
Apr  1 11:24:51 gecko openvpn[29678]: TUN/TAP write bytes,0
Apr  1 11:24:51 gecko openvpn[29678]: TCP/UDP read bytes,0
Apr  1 11:24:51 gecko openvpn[29678]: TCP/UDP write bytes,14
Apr  1 11:24:51 gecko openvpn[29678]: Auth read bytes,0
Apr  1 11:24:51 gecko openvpn[29678]: END
Apr  1 11:24:56 gecko kernel: [81744.689485] keyboard: can't emulate rawmode for keycode 240
Apr  1 11:24:56 gecko kernel: [81744.697451] keyboard: can't emulate rawmode for keycode 240
Apr  1 11:25:00 gecko openvpn[29678]: [UNDEF] Inactivity timeout (--ping-restart), restarting
Apr  1 11:25:00 gecko openvpn[29678]: SIGUSR1[soft,ping-restart] received, process restarting
gecko:/etc/openvpn #

[Reuben]

Hi did you replace the keys with the new ones from https://beta.bolehvpn.net ?

[geckoFeet]

Hadn't - just did - that worked! Thanks!

Sometimes there *is* an easy solution. It's just figuring it all out that's the hard part.

[Reuben]

Great