peter_sm

New version upp! to get the new location of ipp.txt just go and save OpenVPN Server Configuration. //Peter

Hi ideaman924, I will move the ipp.txt to the plugin folder on the flash. new release soon. //Peter

DL it to /boot/extra and reboot or install it manually. installpkg /boot/extra/openvpn-2.3.9-x86_64-1.txz This will override the version of openVPN in the plugin //Peter

Hi, You can try to edit the openvpnserver.ovpn manually. Follow this guide --> https://openvpn.net/index.php/open-source/documentation/miscellaneous/76-ethernet-bridging.html //Peter

For you on 6.1.* can you try to install current version of SSL ( link below ) and see if the plugin works for you with latest OpenVPN Slackware packages that are in latest version of the plugin? http://mirrors.slackware.com/slackware/slackware64-current/slackware64/a/openssl-solibs-1.0.2h-x86_64-1.txz http://mirrors.slackware.com/slackware/slackware64-current/slackware64/n/openssl-1.0.2h-x86_64-1.txz //Peter

New version is available with some GUI updates //Peter

I think it needs a new package that isn’t in 6.1 Peter, how can I ensure that the plugin doesn’t auto update and kill itself? Thanks The plugin using latest current version of OpenVPN. But did you try one of the links from me with older version of OpenVPN? If you have one of these in /boot/extra did that override the version of OpenVPN package I have in the plugin? Skickat från min iPhone med Tapatalk

Hi, unRAID need an update of SSL to work with current OpenVPN. Skickat från min iPhone med Tapatalk

Hi, Here are two links to older version of OpenVPN for you that are on 6.1* :-) https://www.dropbox.com/s/42qtpgipmrvfqrf/openvpn-2.3.6-x86_64-1.txz?dl=0 https://www.dropbox.com/s/sibppxdp63cqi0y/openvpn-2.3.9-x86_64-1.txz?dl=0 //Peter

But if you can find older version of openvpn packages then you can use the plugin, put this in the folder extra :-)

The issue is the latest openvpn packages and unRAID 6.1 :-(

*update update* I'm an idiot. It helps if you put in a name in the field for the client. Totally sorry for bothering you. *update* I checked all the files you listed and they are there, minus peter of course. Yeah I waited for quite a while. Didn't really keep track. It did give me a green check mark. Tried it with 2048 bit and got the same error: Adding client: spawn ./easyrsa build-client-full nopass Generating a 2048 bit RSA private key ..................................................................................................+++ ...+++ writing new private key to '/mnt/cache/openvpn/easy-rsa/easyrsa3/pki/private/nopass.key.XXXXbBXC6g' Enter PEM pass phrase: Verifying - Enter PEM pass phrase:cp: cannot stat '/mnt/cache/openvpn/easy-rsa/easyrsa3/pki/issued/.crt': No such file or directory cp: cannot stat '/mnt/cache/openvpn/easy-rsa/easyrsa3/pki/private/.key': No such file or directory you got only one client script, instead of script plus 4 keys and certs /usr/local/emhttp/plugins/openvpnserver/scripts/rc.openvpnserver: line 473: ./.crt: No such file or directory /usr/local/emhttp/plugins/openvpnserver/scripts/rc.openvpnserver: line 477: ./.key: No such file or directory cp: cannot stat '.crt': No such file or directory cp: cannot stat '.key': No such file or directory rm: cannot remove '.crt': No such file or directory rm: cannot remove '.key': No such file or directory Done Inline file ! Is all OK for you now ? And there is new version released today :-) //Peter

Version 6.1 should be fine for latest plugin Do we need to rebuild anything? I have the same issue even with the latest update. Rolling back to the version that was linked two pages or do ago allows me to connect right away. I appreciate the help do you mean the older version of OpenVPN packages? if so I think there is files on 6.1 that also need to be updated to work with latest current version of openVPN. I can't help you here :-( Maybe try withe curent SSL packeges ?

Can you check in your openvpn folder that these files exis. It looks like the step where you should "Generate the server certificates and keys" didn't finish. You have chosen 4096 RSA key and this can take up to 60 minutes or more ca.crt dh.pem easy-rsa/ ipp.txt openvpnserver.ovpn server.crt server.key ta.key EDIT I did a new fresh installation and all is good Files in pki folder root@Tower:/mnt/appdata/myVPNserver_test5/easy-rsa/easyrsa3/pki# ls ca.crt certs_by_serial/ dh.pem index.txt index.txt.attr index.txt.attr.old index.txt.old issued/ private/ reqs/ serial serial.old file in application folder ca.crt clients/ dh.pem easy-rsa/ openvpnserver.ovpn server.crt server.key ta.key root@Tower:/mnt/appdata/myVPNserver_test5# files for client root@Tower:/mnt/appdata/myVPNserver_test5/clients/peter# ls backup/ peter.ovpn root@Tower:/mnt/appdata/myVPNserver_test5/clients/peter# client Adding client: peter spawn ./easyrsa build-client-full peter nopass Generating a 4096 bit RSA private key .....++ ..++ writing new private key to '/mnt/appdata/myVPNserver_test5/easy-rsa/easyrsa3/pki/private/peter.key.XXXXHipV6N' ----- Using configuration from /mnt/appdata/myVPNserver_test5/easy-rsa/easyrsa3/openssl-1.0.cnf Enter pass phrase for /mnt/appdata/myVPNserver_test5/easy-rsa/easyrsa3/pki/private/ca.key: Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows commonName :ASN.1 12:'peter' Certificate is to be certified until Jul 13 02:23:13 2026 GMT (3650 days) Write out database with 1 new entries Data Base Updated you got only one client script, instead of script plus 4 keys and certs Done Inline file !

Version 6.1 should be fine for latest plugin

What unRAID version are you on? If 6.2 I want you to save your unRAID network settings and try again. I have a new release soon that read the unRAID variables from a different way, apart from that the latest version should work in 6.2. For unRAID Version 6.1 is not affected about this and should be running fine

anything is possible peter, its all a matter of motivation, oh and time :-), is bungy not up for this? He has one, but I don't know if he maintain it ;-) //P

Hi, Is it possible for you to create a nzbget docker with vpn ;-) //Peter

It's OK ;-) see log usermod: no changes [info] Env var PUID defined as 99 [info] Env var PGID defined as 100 [info] Permissions already set for /config and /data chsh: Shell not changed. Changing shell for nobody. [info] Starting Supervisor... 2016-07-13 11:36:18,003 CRIT Set uid to user 0 2016-07-13 11:36:18,003 INFO Included extra file "/etc/supervisor/conf.d/rtorrent.conf" during parsing 2016-07-13 11:36:18,007 INFO supervisord started with pid 25 2016-07-13 11:36:19,009 INFO spawned: 'start-script' with pid 28 2016-07-13 11:36:19,010 INFO spawned: 'rtorrent-script' with pid 29 2016-07-13 11:36:19,011 INFO spawned: 'webui-script' with pid 30 2016-07-13 11:36:19,012 INFO spawned: 'privoxy-script' with pid 31 2016-07-13 11:36:19,018 DEBG 'rtorrent-script' stdout output: [info] rTorrent config file already exists, skipping copy 2016-07-13 11:36:19,018 INFO success: start-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs) 2016-07-13 11:36:19,018 INFO success: rtorrent-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs) 2016-07-13 11:36:19,018 INFO success: webui-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs) 2016-07-13 11:36:19,018 INFO success: privoxy-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs) 2016-07-13 11:36:19,019 DEBG 'rtorrent-script' stdout output: [info] Removing any rtorrent session lock files left over from the previous run... 2016-07-13 11:36:19,019 DEBG 'start-script' stdout output: [info] VPN is enabled, beginning configuration of VPN 2016-07-13 11:36:19,020 DEBG 'rtorrent-script' stdout output: [info] VPN is enabled, checking VPN tunnel local ip is valid 2016-07-13 11:36:19,021 DEBG 'privoxy-script' stdout output: [info] VPN is enabled, checking VPN tunnel local ip is valid 2016-07-13 11:36:19,027 DEBG 'start-script' stdout output: [info] VPN provider defined as pia [info] VPN config file (ovpn extension) is located at /config/openvpn/Sweden.ovpn 2016-07-13 11:36:19,031 DEBG 'start-script' stdout output: [info] Env vars defined via docker -e flags for remote host, port and protocol, writing values to ovpn file... 2016-07-13 11:36:19,039 DEBG 'start-script' stdout output: [info] VPN provider remote gateway defined as sweden.privateinternetaccess.com [info] VPN provider remote port defined as 1197 [info] VPN provider remote protocol defined as udp 2016-07-13 11:36:19,045 DEBG 'start-script' stdout output: [info] VPN provider username defined as xyz 2016-07-13 11:36:19,050 DEBG 'start-script' stdout output: [info] VPN provider password defined as qwerty 2016-07-13 11:36:19,069 DEBG 'start-script' stdout output: [info] Default route for container is 172.17.0.1 2016-07-13 11:36:19,074 DEBG 'start-script' stdout output: [info] Setting permissions recursively on /config/openvpn... 2016-07-13 11:36:19,082 DEBG 'start-script' stdout output: [info] Adding 192.168.0.0/24 as route via docker eth0 2016-07-13 11:36:19,082 DEBG 'start-script' stdout output: [info] ip route defined as follows... -------------------- 2016-07-13 11:36:19,083 DEBG 'start-script' stdout output: default via 172.17.0.1 dev eth0 172.17.0.0/16 dev eth0 proto kernel scope link src 172.17.0.3 192.168.0.0/24 via 172.17.0.1 dev eth0 2016-07-13 11:36:19,083 DEBG 'start-script' stdout output: -------------------- 2016-07-13 11:36:19,086 DEBG 'start-script' stdout output: [info] iptable_mangle support detected, adding fwmark for tables 2016-07-13 11:36:19,118 DEBG 'start-script' stdout output: [info] iptables defined as follows... -------------------- 2016-07-13 11:36:19,119 DEBG 'start-script' stdout output: -P INPUT DROP -P FORWARD ACCEPT -P OUTPUT DROP -A INPUT -i tun0 -j ACCEPT -A INPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT -A INPUT -i eth0 -p udp -m udp --sport 1197 -j ACCEPT -A INPUT -i eth0 -p tcp -m tcp --dport 9080 -j ACCEPT -A INPUT -i eth0 -p tcp -m tcp --sport 9080 -j ACCEPT -A INPUT -i eth0 -p tcp -m tcp --dport 9443 -j ACCEPT -A INPUT -i eth0 -p tcp -m tcp --sport 9443 -j ACCEPT -A INPUT -s 192.168.0.0/24 -i eth0 -p tcp -m tcp --dport 5000 -j ACCEPT -A INPUT -p udp -m udp --sport 53 -j ACCEPT -A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT -A INPUT -i lo -j ACCEPT -A OUTPUT -o tun0 -j ACCEPT -A OUTPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT -A OUTPUT -o eth0 -p udp -m udp --dport 1197 -j ACCEPT -A OUTPUT -o eth0 -p tcp -m tcp --dport 9080 -j ACCEPT -A OUTPUT -o eth0 -p tcp -m tcp --sport 9080 -j ACCEPT -A OUTPUT -o eth0 -p tcp -m tcp --dport 9443 -j ACCEPT -A OUTPUT -o eth0 -p tcp -m tcp --sport 9443 -j ACCEPT -A OUTPUT -d 192.168.0.0/24 -o eth0 -p tcp -m tcp --sport 5000 -j ACCEPT -A OUTPUT -p udp -m udp --dport 53 -j ACCEPT -A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT -A OUTPUT -o lo -j ACCEPT 2016-07-13 11:36:19,119 DEBG 'start-script' stdout output: -------------------- 2016-07-13 11:36:19,119 DEBG 'start-script' stdout output: [info] nameservers 2016-07-13 11:36:19,120 DEBG 'start-script' stdout output: nameserver 8.8.8.8 nameserver 8.8.4.4 2016-07-13 11:36:19,120 DEBG 'start-script' stdout output: -------------------- [info] Starting OpenVPN... 2016-07-13 11:36:19,123 DEBG 'start-script' stdout output: Wed Jul 13 11:36:19 2016 OpenVPN 2.3.11 x86_64-unknown-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [MH] [iPv6] built on May 12 2016 Wed Jul 13 11:36:19 2016 library versions: OpenSSL 1.0.2h 3 May 2016, LZO 2.09 Wed Jul 13 11:36:19 2016 WARNING: file 'credentials.conf' is group or others accessible 2016-07-13 11:36:19,128 DEBG 'start-script' stdout output: Wed Jul 13 11:36:19 2016 UDPv4 link local: [undef] Wed Jul 13 11:36:19 2016 UDPv4 link remote: [AF_INET]91.108.183.186:1197 2016-07-13 11:36:19,135 DEBG 'start-script' stdout output: Wed Jul 13 11:36:19 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this 2016-07-13 11:36:20,657 DEBG 'start-script' stdout output: Wed Jul 13 11:36:20 2016 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1570', remote='link-mtu 1542' Wed Jul 13 11:36:20 2016 WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher BF-CBC' Wed Jul 13 11:36:20 2016 WARNING: 'auth' is used inconsistently, local='auth SHA256', remote='auth SHA1' Wed Jul 13 11:36:20 2016 WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128' 2016-07-13 11:36:20,658 DEBG 'start-script' stdout output: Wed Jul 13 11:36:20 2016 [de4ecb0426b08cbd4a50b7ea3c94393c] Peer Connection Initiated with [AF_INET]91.108.183.186:1197 2016-07-13 11:36:23,150 DEBG 'start-script' stdout output: Wed Jul 13 11:36:23 2016 TUN/TAP device tun0 opened Wed Jul 13 11:36:23 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Wed Jul 13 11:36:23 2016 /usr/bin/ip link set dev tun0 up mtu 1500 2016-07-13 11:36:23,150 DEBG 'start-script' stdout output: Wed Jul 13 11:36:23 2016 /usr/bin/ip addr add dev tun0 local 10.100.1.6 peer 10.100.1.5 2016-07-13 11:36:23,154 DEBG 'start-script' stdout output: Wed Jul 13 11:36:23 2016 Initialization Sequence Completed 2016-07-13 11:36:23,249 DEBG 'privoxy-script' stdout output: [info] Privoxy set to disabled 2016-07-13 11:36:23,249 DEBG fd 24 closed, stopped monitoring <POutputDispatcher at 47966863479296 for <Subprocess at 47966863307624 with name privoxy-script in state RUNNING> (stderr)> 2016-07-13 11:36:23,249 DEBG fd 20 closed, stopped monitoring <POutputDispatcher at 47966863478864 for <Subprocess at 47966863307624 with name privoxy-script in state RUNNING> (stdout)> 2016-07-13 11:36:23,249 INFO exited: privoxy-script (exit status 0; expected) 2016-07-13 11:36:23,249 DEBG received SIGCLD indicating a child quit 2016-07-13 11:36:23,256 DEBG 'rtorrent-script' stdout output: [info] rTorrent not running, marking as first run 2016-07-13 11:36:23,959 DEBG 'rtorrent-script' stdout output: [info] All checks complete, starting rTorrent... 2016-07-13 11:36:23,959 DEBG 'rtorrent-script' stdout output: Script started, file is /home/nobody/typescript 2016-07-13 11:36:23,976 DEBG 'rtorrent-script' stdout output: Script done, file is /home/nobody/typescript 2016-07-13 11:36:24,004 DEBG 'webui-script' stdout output: [info] rtorrent started, setting up webui... 2016-07-13 11:36:24,004 DEBG 'webui-script' stdout output: [warn] PHP timezone not set, this may cause issues with the ruTorrent Scheduler plugin, see here for a list of available PHP timezones, http://php.net/manual/en/timezones.php [info] nginx cert files already exists, skipping copy [info] nginx security file already exists, skipping copy [info] nginx config file already exists, skipping copy 2016-07-13 11:36:24,005 DEBG 'webui-script' stdout output: [info] rutorrent conf folder already exists, skipping copy 2016-07-13 11:36:24,006 DEBG 'webui-script' stdout output: [info] rutorrent share folder already exists, skipping copy 2016-07-13 11:36:24,007 DEBG 'webui-script' stdout output: [info] rutorrent plugins folder already exists, skipping copy 2016-07-13 11:36:24,132 DEBG 'webui-script' stdout output: [info] starting php-fpm... 2016-07-13 11:36:24,149 DEBG 'webui-script' stderr output: [NOTICE] [pool www] 'user' directive is ignored when FPM is not running as root [NOTICE] [pool www] 'group' directive is ignored when FPM is not running as root 2016-07-13 11:36:24,152 DEBG 'webui-script' stdout output: [info] starting nginx... 2016-07-13 11:36:24,004 DEBG 'webui-script' stdout output: [info] rtorrent started, setting up webui... 2016-07-13 11:36:24,004 DEBG 'webui-script' stdout output: [warn] PHP timezone not set, this may cause issues with the ruTorrent Scheduler plugin, see here for a list of available PHP timezones, http://php.net/manual/en/timezones.php [info] nginx cert files already exists, skipping copy [info] nginx security file already exists, skipping copy [info] nginx config file already exists, skipping copy 2016-07-13 11:36:24,005 DEBG 'webui-script' stdout output: [info] rutorrent conf folder already exists, skipping copy 2016-07-13 11:36:24,006 DEBG 'webui-script' stdout output: [info] rutorrent share folder already exists, skipping copy 2016-07-13 11:36:24,007 DEBG 'webui-script' stdout output: [info] rutorrent plugins folder already exists, skipping copy 2016-07-13 11:36:24,132 DEBG 'webui-script' stdout output: [info] starting php-fpm... 2016-07-13 11:36:24,149 DEBG 'webui-script' stderr output: [NOTICE] [pool www] 'user' directive is ignored when FPM is not running as root [NOTICE] [pool www] 'group' directive is ignored when FPM is not running as root 2016-07-13 11:36:24,152 DEBG 'webui-script' stdout output: [info] starting nginx... And the ovpn file. root@Tower:/mnt/appdata/binhex-rtorrentvpn/openvpn# more Sweden.ovpn client dev tun resolv-retry infinite nobind persist-key cipher aes-256-cbc auth sha256 tls-client remote-cert-tls server auth-user-pass credentials.conf comp-lzo verb 1 reneg-sec 0 crl-verify crl.rsa.4096.pem ca ca.rsa.4096.crt

Let me do a new check, it was wrong ovpn file !!

nzbgetvpn We need this docker to be updated according the new PIA certs. See binhex VPN dockers //Peter

Hi binhex, The port 1198 is OK but not 1197 (The strong Certs) //Peter

Wow, it worked! I saved the network settings, and the config file changed. (by saving this, new users, I mean changing the DHCP to manual, then back to automatic) After restart of the OpenVPN plugin, I was able to access the internet. Thanks peter_sm! Oh, and one more thing. How do I know all of my traffic is getting passed through the VPN? I don't want any leaks. Thanks again! About the leaks I don't know, can you do some googling and see if this is a risk for openvpn server ?

Just go and save your network settings for unRAID. Then you will see a different format of network.cfg

The format is old of your network.cfg, please do an update of the newtwork settings in unRAID and look at the network.cfg and try again :-) //Peter