BolehVPN Support
Community: Hang out with the Boleh family => General Discussion => Topic started by: geckoFeet on March 31, 2011, 11:52:05 AM
-
Hi, and HELP!
I had openvpn working under linux (openSuse 11.4), all behaving very nicely, stopping when I asked it to stop and starting when I asked it to start. Then, with no changes to any files or anything else, it refused to start. Or, rather, it says it starts, but there's no tunnel or /dev/tun0 or anything at all, not even any error message in the terminal window (I control the thing with /etc/init.d/openvpn start> or <... restart> or <... stop>). Message from /var/log/ is:
Mar 30 23:49:48 gecko openvpn[10078]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mar 30 23:49:48 gecko openvpn[10078]: WARNING: file 'geckoFeet.key' is group or others accessible
Mar 30 23:49:48 gecko kernel: [ 1584.664648] SFW2-INdmz-ACC IN=eth0 OUT= MAC=01:00:5e:7f:ff:fa:00:23:cd:fd:b1:6
I don't even know where to start looking for any clues. Please help!
-
Could you try uninstalling and then reinstalling OpenVPN via YAST?
-
Un- and re-installed; no change. Alas!
-
Does this happen with all configs? Which config are u connecting to? Please paste the contents of that .conf or .ovpn file here.
-
It's just the stock bolehroute.opvn:
client
dev tun
proto udp
route-method exe
route-delay 3
# Server List
#BolehRoute UK #1
remote apache.bolehvpn.net 443
#BolehRoute UK #2
remote geronimo.bolehvpn.net 443
#BolehRoute EU #3
remote cochise.bolehvpn.net 443
#BolehRoute EU #4
remote br4.bolehvpn.net 443
#BolehRoute UK #5
remote br5.bolehvpn.net 443
#BolehRoute UK #6
remote br6.bolehvpn.net 443
remote-random
resolv-retry 10
nobind
persist-key
#persist-tun
keepalive 3 10
ns-cert-type server
# Set log file verbosity.
verb 1
# Silence repeating messages
mute 20
#User Info
ca ca.crt
cert geckoFeet.crt
key geckoFeet.key
-
Are there any other logs in /etc/openvpn ?
-
no logs there; only in /var/log/messages; here's the last part of that, after
gecko:/etc/openvpn # /etc/init.d/openvpn status
(which returns "running" in the terminal window):
Apr 1 11:24:36 gecko openvpn[29678]: Re-using SSL/TLS context
Apr 1 11:24:37 gecko openvpn[29678]: UDPv4 link local: [undef]
Apr 1 11:24:37 gecko openvpn[29678]: UDPv4 link remote: 92.48.112.68:443
Apr 1 11:24:48 gecko openvpn[29678]: [server] Inactivity timeout (--ping-restart), restarting
Apr 1 11:24:48 gecko openvpn[29678]: SIGUSR1[soft,ping-restart] received, process restarting
Apr 1 11:24:49 gecko kernel: [81737.438263] SFW2-INdmz-ACC IN=eth0 OUT= MAC=01:00:5e:7f:ff:fa:00:23:cd:fd:b1:62:08:00 SRC=192.168.0.120 DST=239.255.255.250 LEN=312 TOS=0x00 PREC=0x00 TTL=1 ID=39967 PROTO=UDP SPT=1025 DPT=1900 LEN=292
Apr 1 11:24:50 gecko openvpn[29678]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Apr 1 11:24:50 gecko openvpn[29678]: Re-using SSL/TLS context
Apr 1 11:24:50 gecko openvpn[29678]: UDPv4 link local: [undef]
Apr 1 11:24:50 gecko openvpn[29678]: UDPv4 link remote: 212.117.176.3:443
Apr 1 11:24:51 gecko openvpn[29678]: event_wait : Interrupted system call (code=4)
Apr 1 11:24:51 gecko openvpn[29678]: OpenVPN STATISTICS
Apr 1 11:24:51 gecko openvpn[29678]: Updated,Fri Apr 1 11:24:51 2011
Apr 1 11:24:51 gecko openvpn[29678]: TUN/TAP read bytes,0
Apr 1 11:24:51 gecko openvpn[29678]: TUN/TAP write bytes,0
Apr 1 11:24:51 gecko openvpn[29678]: TCP/UDP read bytes,0
Apr 1 11:24:51 gecko openvpn[29678]: TCP/UDP write bytes,14
Apr 1 11:24:51 gecko openvpn[29678]: Auth read bytes,0
Apr 1 11:24:51 gecko openvpn[29678]: END
Apr 1 11:24:56 gecko kernel: [81744.689485] keyboard: can't emulate rawmode for keycode 240
Apr 1 11:24:56 gecko kernel: [81744.697451] keyboard: can't emulate rawmode for keycode 240
Apr 1 11:25:00 gecko openvpn[29678]: [UNDEF] Inactivity timeout (--ping-restart), restarting
Apr 1 11:25:00 gecko openvpn[29678]: SIGUSR1[soft,ping-restart] received, process restarting
gecko:/etc/openvpn #
-
Hi did you replace the keys with the new ones from https://beta.bolehvpn.net ?
-
Hadn't - just did - that worked! Thanks!
Sometimes there *is* an easy solution. It's just figuring it all out that's the hard part.
-
Great :D