17 replies to this topic

[idealsat]

Hi

 

i install openvpn on openpli4 dm800se.

 

i put enigma.ovpn file in /etc/openvpn

 

when i start openvpn i get this error

 

---

root@dm800se:~# /etc/init.d/openvpn start
Starting openvpn: FAILED-> client.
root@dm800se:~#

---

 

i rename enigma.ovpn to enigma.conf same error.

 

can anyone tell me config for openvpn for openpli?

 

thanks

[catastrofus]

Rename it to openvpn.conf and try again. Did you look into /var/log/messages for the error?

[idealsat]

i rename to openvpn.conf

 

here is var/log

Jan  1 06:48:45 dm800se daemon.err openvpn[535]: Options error: Unrecognized option or missing parameter(s) in /etc/openvpn/openvpn.conf:12: ignore-unknown-option (2.3.2)

Jan  1 06:48:45 dm800se daemon.warn openvpn[535]: Use --help for more information.

 

 

thanks for your reply

[catastrofus]

Unrecognized option in your config. Fix that.

Show me your openvpn.log.

Edited by catastrofus, 31 August 2021 - 19:27.

[idealsat]

i fixed

 

now its start 

 

---

Jan  1 01:01:51 dm800se daemon.err openvpn[420]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

Jan  1 01:01:51 dm800se daemon.err openvpn[420]: TLS Error: TLS handshake failed

Jan  1 01:01:51 dm800se daemon.notice openvpn[420]: SIGUSR1[soft,tls-error] received, process restarting

Jan  1 01:01:51 dm800se daemon.notice openvpn[420]: Restart pause, 2 second(s)

Jan  1 01:01:53 dm800se daemon.warn openvpn[420]: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.

Jan  1 01:01:53 dm800se daemon.notice openvpn[420]: Socket Buffers: R=[163840->131072] S=[163840->131072]

Jan  1 01:01:53 dm800se daemon.notice openvpn[420]: UDPv4 link local: [undef]

Jan  1 01:01:53 dm800se daemon.notice openvpn[420]: UDPv4 link remote: [AF_INET]x.x.x.x:1194

 

----

tls key i remove from openvpn.conf

 

if i put then same issue start failed.

 

any solution?

 

thanks for your reply

[idealsat]

if i put tls key then here is log

Jan  1 01:09:14 dm800se daemon.notice openvpn[420]: SIGTERM[hard,] received, process exiting

Jan  1 01:09:15 dm800se daemon.err openvpn[486]: Options error: Unrecognized option or missing parameter(s) in /etc/openvpn/openvpn.conf:16: tls-crypt (2.3.2)

Jan  1 01:09:15 dm800se daemon.warn openvpn[486]: Use --help for more information.

[catastrofus]

Show us your openvpn config.

[idealsat]

here is config

 

--

client

dev tun

proto udp

remote x.x.x.x 1194

resolv-retry infinite

nobind

persist-key

persist-tun

auth SHA512

cipher AES-256-CBC

remote-cert-tls server

verb 3

 

<ca>

-----BEGIN CERTIFICATE-----

xxxxxxxxxxx

-----END CERTIFICATE-----

</ca>

<cert>

-----BEGIN CERTIFICATE-----

xxxxxxxxx

-----END CERTIFICATE-----

</cert>

<key>

-----BEGIN PRIVATE KEY-----

xxxxxxxxxxxxxx

-----END PRIVATE KEY-----

</key>

<tls-crypt>

-----BEGIN OpenVPN Static key V1-----

xxxxxxxxxx

xxxxxxxxx

-----END OpenVPN Static key V1-----

</tls-crypt>

 

---

i replace original certificate keys to xxx

 

thanks

[WanWizard]

The OpenVPN version is OpenPLi 4 doesnt support tls-crypt, like the error message already says.

[idealsat]

can you send me latest openvpn version ipk?

 

thanks

[WanWizard]

No, OpenPLi 4 is ancient, a newer one won't work without upgrading everything else.

 

And frankly so is the dm800se, which is why OpenPLi 4 is the last version available.

[idealsat]

openpli support pptp client?

 

thanks

[WanWizard]

No.

root@vuduo4k:~# opkg list | grep pptp
root@vuduo4k:~# 

but I think it is available in OE, so it could be built.

[idealsat]

ok can you send these file from you vuduo box

 

/usr/lib/

 

libcrypto.so.1.0.2

libssl.so.1.0.2

 

i download latest vpn its required these files

 

thanks for your reply

[WanWizard]

They won't work on a DM800, different CPU architecture.

[idealsat]

ok i grep here is i got how i can install pptp

 

root@dm800se:~# opkg list | grep pptp

kernel-module-nf-conntrack-pptp - 3.2-r14.19.51.22 - nf-conntrack-pptp kernel module  nf-conntrack-pptp kernel module;

kernel-module-nf-nat-pptp - 3.2-r14.19.51.22 - nf-nat-pptp kernel module  nf-nat-pptp kernel module; Netfilter NAT

[WanWizard]

These are iptables modules, not pptp.

 

As I posted before, it is not available in OpenPLi, you need to compile it.

[idealsat]

ok thank you