12 replies to this topic

[jojban]

How is VPN installed to activate image Openpli 6.2 receiver Vu + DUO and Xtrend 6500?

[jojban]

I have Vu + DUO and Xtrend6500. Image OpenPli 6.2. Softcam Oscam. I have the VPN configuration. Please, where do I insert VPN config and how to activate it after installation?

[WanWizard]

There is no default VPN functionality in OpenPLi.

 

What kind of VPN? Between what and what? What is the client and what is the server?

[littlesat]

Openvpn can be installed with opkg install openvpn

 

Config, keys and licenses should be put in ./etc/openvpn... after installation and restart it should be auto restarted. Manual restart could be done via /etc/init.d/openvpn [start/stop/restart]

[cekal99]

Openvpn can be installed with opkg install openvpn

 

Config, keys and licenses should be put in ./etc/openvpn... after installation and restart it should be auto restarted. Manual restart could be done via /etc/init.d/openvpn [start/stop/restart]

 

Hello 

 

Is it still available on OpenPli 7.2 ? Vpn Cyberghost, Vu+ uno 4K Se

 

-opkg install openvpn (looks like its allready installed becouse nothing happend..)

-all files (openvpn.conf and auth.txt) are in /etc/openvpn (is it enough to make file with password and edit conf in notepad++?)

-auth-user-pass /etc/openvpn/auth.txt , and then reboot -done

-webif VPN enabled (is it ok with only local connection ((enable http authentication,enable https -disabled)? 

-openvpn must running (autostart)  (how to check it? -/etc/init.d/openvpn can't find it so why it's not created?)

 -have tried also update-rc.d openvpn defaults and 

cd /etc/rc3.d 

ln -s ../init.d/openvpn S99openvpn

 

maybe a config is not valid. but i'm lost now- don't know where to look

 

ps. when adding new device in cyberghost what protocol is best to choose UDP,TCP, L2TP and there is more..

 

any help greatly appreciated

 

 

[WanWizard]

OpenPli 7.2 is no longer maintained, and afaik the missing start script link has been fixed.

 

You can enable debugging by adding "verb 3" to your conf file, and restarting openvpn. Afaik it logs in /var/log/messages.

[cekal99]

hi

many thanks for your reply

 

openpli 7.3 not 7.2 as i wrote, anyway many warning in log file:

 

Oct 23 19:36:07 vuuno4kse daemon.warn openvpn[14294]: WARNING: file 'client.key' is group or others accessible
Oct 23 19:36:07 vuuno4kse daemon.warn openvpn[14294]: WARNING: file '/etc/openvpn/pas.key' is group or others accessible
Oct 23 19:36:07 vuuno4kse daemon.notice openvpn[14294]: OpenVPN 2.4.7 arm-oe-linux-gnueabi [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jul  4 2020
Oct 23 19:36:07 vuuno4kse daemon.notice openvpn[14294]: library versions: OpenSSL 1.0.2r  26 Feb 2019, LZO 2.09
Oct 23 19:36:07 vuuno4kse daemon.notice openvpn[14295]: TCP/UDP: Preserving recently used remote address: [AF_INET]95.xxx....
Oct 23 19:36:07 vuuno4kse daemon.notice openvpn[14295]: Socket Buffers: R=[163840->163840] S=[163840->163840]
Oct 23 19:36:07 vuuno4kse daemon.notice openvpn[14295]: UDP link local: (not bound)
Oct 23 19:36:07 vuuno4kse daemon.notice openvpn[14295]: UDP link remote: [AF_INET]95.xxx
Oct 23 19:36:07 vuuno4kse daemon.notice openvpn[14295]: TLS: Initial packet from [AF_INET]95.xxx, sid=89cc1cb4 e7130027
Oct 23 19:36:07 vuuno4kse daemon.warn openvpn[14295]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Oct 23 19:36:07 vuuno4kse daemon.notice openvpn[14295]: VERIFY OK: depth=1, C=RO, L=Bucharest, O=CyberGhost S.A., CN=CyberGhost Root CA, emailAddress=info@cyberghost.ro
Oct 23 19:36:07 vuuno4kse daemon.notice openvpn[14295]: VERIFY KU OK
Oct 23 19:36:07 vuuno4kse daemon.notice openvpn[14295]: Validating certificate extended key usage
Oct 23 19:36:07 vuuno4kse daemon.notice openvpn[14295]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Oct 23 19:36:07 vuuno4kse daemon.notice openvpn[14295]: VERIFY EKU OK
Oct 23 19:36:07 vuuno4kse daemon.notice openvpn[14295]: VERIFY OK: depth=0, CN=copenhagen-rack403.nodes.gen4.ninja
Oct 23 19:36:07 vuuno4kse daemon.warn openvpn[14295]: WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1569', remote='link-mtu 1549'
Oct 23 19:36:07 vuuno4kse daemon.warn openvpn[14295]: WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher AES-128-GCM'
Oct 23 19:36:07 vuuno4kse daemon.warn openvpn[14295]: WARNING: 'auth' is used inconsistently, local='auth SHA256', remote='auth [null-digest]'
Oct 23 19:36:07 vuuno4kse daemon.warn openvpn[14295]: WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128'
Oct 23 19:36:07 vuuno4kse daemon.notice openvpn[14295]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Oct 23 19:36:07 vuuno4kse daemon.notice openvpn[14295]: [copenhagen-rack403.nodes.gen4.ninja] Peer Connection Initiated with [AF_INET]95.xxx
Oct 23 19:36:08 vuuno4kse daemon.notice openvpn[14295]: SENT CONTROL [copenhagen-rack403.nodes.gen4.ninja]: 'PUSH_REQUEST' (status=1)
Oct 23 19:36:08 vuuno4kse daemon.notice openvpn[14295]: AUTH: Received control message: AUTH_FAILED
Oct 23 19:36:08 vuuno4kse daemon.notice openvpn[14295]: SIGTERM received, sending exit notification to peer
Oct 23 19:36:10 vuuno4kse daemon.notice openvpn[14295]: SIGTERM[soft,exit-with-notification] received, process exiting
Oct 23 19:37:17 vuuno4kse authpriv.err vsftpd: pam_listfile(vsftpd:auth): Couldn't open /etc/vsftpd.ftpusers
Oct 23 19:37:38 vuuno4kse authpriv.err vsftpd: pam_listfile(vsftpd:auth): Couldn't open /etc/vsftpd.ftpusers

and after switching on Vu box I must start vpn manually /etc/init.d/openvpn start

 

BR

[WanWizard]

The logs shows it starts, but authentication fails?

 

edit: I've checked our OE repository, but we don't do anything with OpenVPN, we build it directly from the main OE repository,

[littlesat]

Here openvpn works....

[Aliraza63]

 

Openvpn can be installed with opkg install openvpn

 

Config, keys and licenses should be put in ./etc/openvpn... after installation and restart it should be auto restarted. Manual restart could be done via /etc/init.d/openvpn [start/stop/restart]

 

Hello 

 

Is it still available on OpenPli 7.2 ? Vpn Cyberghost, Vu+ uno 4K Se

 

-opkg install openvpn (looks like its allready installed becouse nothing happend..)

-all files (openvpn.conf and auth.txt) are in /etc/openvpn (is it enough to make file with password and edit conf in notepad++?)

-auth-user-pass /etc/openvpn/auth.txt , and then reboot -done

-webif VPN enabled (is it ok with only local connection ((enable http authentication,enable https -disabled)? 

-openvpn must running (autostart)  (how to check it? -/etc/init.d/openvpn can't find it so why it's not created?)

 -have tried also update-rc.d openvpn defaults and 

cd /etc/rc3.d 

ln -s ../init.d/openvpn S99openvpn

 

maybe a config is not valid. but i'm lost now- don't know where to look

 

ps. when adding new device in cyberghost what protocol is best to choose UDP,TCP, L2TP and there is more..

 

any help greatly appreciated

 

 

 

  Did you try these plugins? 

 

I have tried . both working seamlessly 

Attached Files

•  enigma2-plugin-extensions-purevpn_1.0.1_all.ipk   331.47KB   24 downloads
•  enigma2-plugin-extensions-vpnmanager_1.1.4_all.ipk   519.71KB   50 downloads

[aorhan69]

Hi,

How to run vpn on openpli 7.3, I tried everything, nothing happened,  Error messages (Future module not found), the application does not start etc.

I have tried openvpn, vpn changer, vpn manager with no success.

Need help

[Jamalnsr]

Hi, 

I want config openvpn/expressvpn on OPENPLI 8

 

Help please

[dolphs]

Hi @Jamalnsr

 

Basically what littlesat wrote up few years back is still applicable

 

Openvpn can be installed with opkg install openvpn

 

Config, keys and licenses should be put in ./etc/openvpn... after installation and restart it should be auto restarted. Manual restart could be done via /etc/init.d/openvpn [start/stop/restart]

 

 

eg. my structure ( "server, thus portforward in router " ) shows 

root@vuuno4k:/etc/openvpn# ls -la
drwxr-xr-x    5 root     root          4096 Jun 13 02:58 .
drwxr-xr-x   41 root     root          4096 Jan  1  1970 ..
drwxr-xr-x    2 root     root          4096 Jul  8 13:16 ccd
drwx------    2 root     root          4096 Jun 13 01:36 key
-rw-------    1 root     root          1146 Jul  8 13:19 server.conf

Both .conf file and keys are important files. Perhaps you can start with XCA generating certs and private keys ( client-server )

Therefore please note it is not an "out of the box" thingie and it needs to be thought about carefully.

Edited by dolphs, 9 July 2021 - 11:36.