64bit plg won't upgrade to the latest openvpn

 

Keep getting "Not connected! tun5 not established!!!" error

Hi everyone,

 

It seams that few rescent updates has changed the way OpenVPN work on my server. I used to have an ovpn block in the OpenVPN configuration  page to choose from different ovpn files.

I cannot do this anymore.

 

I've upgraded to Unraid 5.0.6 and have the last OpenVPN. re-install the plg and upgraded directly trough the configuraiton page. I have an error. A file in the plg cannot be reached or is not available.

 

I've downgraded and it doesn't work. I've created an openvpn folder in /boot and i've put my configuration files and I still have an error. Here attached you will find a copy of my configuration page for OpenVPN.

 

Can someone help me with these issues ? or give few tips in order to rebuild my config files ?

 

Thanks for your help !

 

Guillaume

unRaid 5.0.6

OpenVPN Plugin Version 2.7.25

OpenVPN Software Build OpenVPN 2.3.2

I am also getting same error.

 

Options error: You must define TUN/TAP device (--dev)
Use --help for more information.

 

I have attached my ovpn file.

gw1.lax1.lightspeedvpn.com.ovpn.txt

I am also getting same error.

 

What same error did you get, and who have the same issue ?

 

//peter

Hi everyone,

 

It seams that few rescent updates has changed the way OpenVPN work on my server. I used to have an ovpn block in the OpenVPN configuration  page to choose from different ovpn files.

I cannot do this anymore.

 

I've upgraded to Unraid 5.0.6 and have the last OpenVPN. re-install the plg and upgraded directly trough the configuraiton page. I have an error. A file in the plg cannot be reached or is not available.

 

I've downgraded and it doesn't work. I've created an openvpn folder in /boot and i've put my configuration files and I still have an error. Here attached you will find a copy of my configuration page for OpenVPN.

 

Can someone help me with these issues ? or give few tips in order to rebuild my config files ?

 

Thanks for your help !

 

Guillaume

unRaid 5.0.6

OpenVPN Plugin Version 2.7.25

OpenVPN Software Build OpenVPN 2.3.2

 

Have you get it working ?

 

//Peter

Update of openSSL is done , now shall all work again.

 

//Peter

I am also getting same error.

 

What same error did you get, and who have the same issue ?

 

//peter

 

I am also getting same error as Crackus. I see error description in screenshot he attached to the post.

 

Options error: You must define TUN/TAP device (--dev)

Use --help for more information.

 

Thanks for your help.

-DJ

Do an update , and let me know ;-)

I will do an update once I reach home. Thanks for your help !!

I got my problem resolved without update. I made following two changes to make it work.

 

In my ovpn file

 

Updated

 

remote serername port udp

 

to

remote servername port

proto udp

 

Also, I had certs embedded in ovpn file like <ca>....</ca>. I created new cert file from embedded value and in my main ovpn file reference ca ca.crt file.

Hi everyone,

 

It seams that few rescent updates has changed the way OpenVPN work on my server. I used to have an ovpn block in the OpenVPN configuration  page to choose from different ovpn files.

I cannot do this anymore.

 

I've upgraded to Unraid 5.0.6 and have the last OpenVPN. re-install the plg and upgraded directly trough the configuraiton page. I have an error. A file in the plg cannot be reached or is not available.

 

I've downgraded and it doesn't work. I've created an openvpn folder in /boot and i've put my configuration files and I still have an error. Here attached you will find a copy of my configuration page for OpenVPN.

 

Can someone help me with these issues ? or give few tips in order to rebuild my config files ?

 

Thanks for your help !

 

Guillaume

unRaid 5.0.6

OpenVPN Plugin Version 2.7.25

OpenVPN Software Build OpenVPN 2.3.2

 

Have you get it working ?

 

//Peter

 

Hi Peter,

 

Sorry for the late answer but it works very well now, i've installed the last version of plugin, update it through web UI and no issues to report at this stage. Thank you very much for your time and work on this.

 

Have a nice day,

 

Guillaume

I'm using unRaid 5.0.5 and OpenVPN Plugin 2.7.26 with OpenVPN 2.3.2.

 

I set it up using my providers ovpn (PIA) and everything seems to work fine, however, I have no internet connection at all.

 

OpenVPN log:

Thu Dec  4 12:07:01 2014 OpenVPN 2.3.2 i486-slackware-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [iPv6] built on Jun 22 2013
Thu Dec  4 12:07:01 2014 WARNING: file '/boot/config/plugins/openvpn/password.txt' is group or others accessible
Thu Dec  4 12:07:01 2014 UDPv4 link local: [undef]
Thu Dec  4 12:07:01 2014 UDPv4 link remote: [AF_INET]162.253.131.154:1194
Thu Dec  4 12:07:01 2014 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Dec  4 12:07:06 2014 [Private Internet Access] Peer Connection Initiated with [AF_INET]162.253.131.154:1194
Thu Dec  4 12:07:08 2014 TUN/TAP device tun5 opened
Thu Dec  4 12:07:08 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Dec  4 12:07:08 2014 /usr/sbin/ip link set dev tun5 up mtu 1500
Thu Dec  4 12:07:08 2014 /usr/sbin/ip addr add dev tun5 local 10.100.1.6 peer 10.100.1.5
Thu Dec  4 12:07:08 2014 Initialization Sequence Completed

 

ip route:

0.0.0.0/1 via 10.100.1.5 dev tun5 
default via 192.168.0.1 dev eth0  metric 1 
10.100.1.1 via 10.100.1.5 dev tun5 
10.100.1.5 dev tun5  proto kernel  scope link  src 10.100.1.6 
127.0.0.0/8 dev lo  scope link 
128.0.0.0/1 via 10.100.1.5 dev tun5 
162.253.131.154 via 192.168.0.1 dev eth0 
192.168.0.0/24 dev eth0  proto kernel  scope link  src 192.168.0.101 

 

OpenVPN status:

OpenVPN STATISTICS
Updated,Thu Dec  4 12:10:01 2014
TUN/TAP read bytes,5731
TUN/TAP write bytes,0
TCP/UDP read bytes,5567
TCP/UDP write bytes,10121
Auth read bytes,256
pre-compress bytes,3393
post-compress bytes,3444
pre-decompress bytes,0
post-decompress bytes,0
END

 

What am I missing?

I'm new to this VPN thing so please excuse me if the questions are too basic. The way I understand it, VPN is required to prevent 2 things that concern me (in addition to several that don't") :

 

1. It hides my external IP address, or makes it appear to be a random other IP so that my usage, traffic, browsing, downloading etc cannot be traced back to me.

 

2. So that it prevents hackers and other internet pirates to attack my unRAID server and gain access to my data maybe.

 

Hence I think it is imperative that I set one up. Choice of VPN service aside, what I am trying to understand currently is WHERE I need to install this VPN. I have been made to understand that it could be as simple as typing my url in an alternate address bar within a webpage TO installing a VPN app running on a supporting router/ modem (??)

 

So on a typical network like most people ove here would have where I have a unRAID server, 4-5 media center clients and several other wireless clients ranging from laptops, tablets and phones - all of which are exchanging arguably questionable content with the world wide web, where in this chain does my VPN need to be? And I ask this because my unRAID server is not the only device in the house that is used for downloading or which needs to avoid geotagging, or be secured from online attacks. So as it logically seems to be, does the VPN service need to be on the router??

 

 

I'm new to this VPN thing so please excuse me if the questions are too basic. The way I understand it, VPN is required to prevent 2 things that concern me (in addition to several that don't") :

 

1. It hides my external IP address, or makes it appear to be a random other IP so that my usage, traffic, browsing, downloading etc cannot be traced back to me.

 

2. So that it prevents hackers and other internet pirates to attack my unRAID server and gain access to my data maybe.

If you set up the VPN with a service that provides a random external IP, you are opening up that tunnel to the internet in general, and actually greatly increasing the chances of getting hacked, unless you or the VPN service firewall that connection.

Hello

 

I've just started using a vpn from my server and thanks to everyone here i had no problems installing and connecting to my vpn.

 

However now that I have it all connected I can no longer cast from my server to my chromecast.

 

I have the giganews vpn running just on my server with this plugging

 

I use plex and everything else on my network (tv's tablets pc) that connects to my server have no problem playing with the vpn connected.

 

I am assuming i need to set up some iptables or to use the bypassed.txt but i have no idea how to do that for a chromcaste.

 

if anyone can help point me in the right direction for this that would be amazing

 

Macphee

 

 

Hi,

 

sorry for this stupid question but i dont want to make anything wrong.

 

I have a router and my unraid server is behind the router. No port is open to the unraid server, so no one from the internet could get to my unraid server only intern access. When i now install the open vpn client and get connected to my vpn provider i have a new external ip adress. Could anyone now get on my unraid server ? And if yes what must i do that i have only internal access to my unraid server when i´m connected to vpn ?

 

Thanks

 

Is this still the correct format for starting and stopping the client automatically at specified times? I have added this to my go file but it is not running. I have checked the logs and their is no evidence of it running.

 

I'm on the latest 64-bit version of the client

 

 

#Start and stop openvpn client

 

#Start openvpn at 1 am every day

crontab -l > /tmp/file; echo '#Start openvpn at 1 am every day' >> /tmp/file; echo '00 1 * * * /etc/rc.d/rc.openvpnclient  start >/dev/null 2>&1' >>/tmp/file; crontab /tmp/file; rm /tmp/file

 

#Stop openvpn at 7 am every day

crontab -l > /tmp/file; echo '#Stop openvpn at 5 am every day' >> /tmp/file; echo '00 7 * * * /etc/rc.d/rc.openvpnclient  stop >/dev/null 2>&1' >>/tmp/file; crontab /tmp/file; rm /tmp/file

 

 

 

Hi, Im using a VPN from privateinternetaccess.com, when I start using this plugin I see the following error:

 

root@Tower:~# /etc/rc.d/rc.openvpn start
Updating the ovpn file...
/etc/rc.d/rc.openvpn: line 193: $OVPNCHOOSE: ambiguous redirect
The ovpn file was updated with -->  /boot/config/plugins/openvpn/password.txt
/etc/rc.d/rc.openvpn: line 201: $OVPNCHOOSE: ambiguous redirect
The ovpn file was updated with -->  status /tmp/openvpn/openvpn-status.log
Changing to the folder where the openvpn config files belong
/boot/openvpn
openvpn --writepid /var/run/openvpn/openvpn.pid --script-security 3 --mute-replay-warnings --config /boot/openvpn/US East.ovpn > /dev/null 2>&1
Starting Openvpn Tunnel: Please Wait...
Not connected!  tun5  not established!!!
OK... Started
Terminated

 

They offer several config files, Ive chosen the "OPENVPN CONFIGURATION FILES (DEFAULT)" however there are also others:

OPENVPN CONFIGURATION FILES (IP)

OPENVPN CONFIGURATION FILES (IP-LPORT)

OPENVPN CONFIGURATION FILES (TCP)

OPENVPN CONFIGURATION FILES (IP-TCP)

 

Should I be using one of these?

 

Also, if I start the plugin from the Web plugin my unraid confi page does not load until I reset the unraid box.

 

Any advice?

 

My config file looks like this:

 

root@Tower:/boot/openvpn# cat US\ East.ovpn
client
proto udp
dev tun5
remote us-east.privateinternetaccess.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
tls-client
remote-cert-tls server
comp-lzo
verb 1
reneg-sec 0
crl-verify crl.pem

 

Hi,

 

What version of Unraid and plugin are you using ? and for a quick test, can you remove space in the file name (US East.ovpn) and test ?

 

//Peter

 

Hi,

 

What version of Unraid and plugin are you using ? and for a quick test, can you remove space in the file name (US East.ovpn) and test ?

 

//Peter

 

Hi Peter,

removing the space worked! FYI im on a older version, 5.0-rc8a (beta), been living by the manta "If it ain't broken don't fix it" so havent updated in ages

 

 

I am still noticing an issue tho, starting the service from the plugin config page seems to prevent me from being able to access the main unraid page (port 80), but im still able to access other webservices running on other ports.  Do I need to create some sort of route?

Hi, you shall not do anything, port 80 shall work, go for latest V5 :-) or  V6 B12, or wait some day, I think they shall release a new version of V6 any day ;-)

 

//Peter

Hi,

 

ok the vpn client works very good and the installation was perfect with the instructions from here. Thanks for this nice plugin.

 

I´m using privatinternetaccess as vpn provider. With the windows client i could enable data encryyption and data authentification. I the openvpn forum i found a thread where some told that i must modify the ovpn file with these :

 

cipher AES-128-CBC

 

and i must change the remote port for the connection from 1194 to 1196 .

 

Is this correct ? Must i modify more ? Have anyone experience with this vpn provider ?

Hi Peter, I want to setup an open VPN server on a new Vm . Pls, can you suggest:

- which Linux distro should I use?

- how many Ethernet cards should it have? Can I use the Virt Io Ethernet and then 1 extra ethernet card?

- how should this cards be configured?

Rgds.

All,

 

I decided to make the jump to VPN and the OpenVPN plugin is perfect to meet my needs.  I am running UnRAID 5.0-rc11 with SimpleFeatures v1.0.11 and using OctaneVPN.  I downloaded the linked version from the main page, installed and then updated.  I've run in to a couple of issues trying to get it running:

 

1. The updated plugin did not install.  I traced this to updated openssl packages on the slackware ftp.  Changes made to openvpn_client.plg:

<FILE Name="/boot/packages/openssl-1.0.1j-i486-1.txz" Run="upgradepkg --install-new">
<URL>ftp://ftp.sunet.se/pub/os/Linux/distributions/slackware//slackware-current/slackware/n/openssl-1.0.1k-i486-1.txz</URL>
<MD5>00ae9f01693bf86a709fd79b0e8cd099</MD5>
</FILE>

<FILE Name="/boot/packages/openssl-solibs-1.0.1k-i486-1.txz" Run="upgradepkg --install-new">
<URL>ftp://ftp.sunet.se/pub/os/Linux/distributions/slackware//slackware-current/slackware/a/openssl-solibs-1.0.1k-i486-1.txz</URL>
<MD5>cb7d3aa850b3cfe54abd1eb61c881cc7</MD5>
</FILE>

 

2. With the updated plugin installed I tried to launch my VPN connection.  I get the following error:

Options error: You must define TUN/TAP device (--dev)

Use --help for more information.

 

I found the rc.openvpn file was running a function that expected the interface to be named 'tun5'.  I had to change 'dev tun' to 'dev tun5' in my OpenVPN configuration file in /boot/openvpn as the startup script was deleting 'dev tun' each time it ran.  I got the configuration file from OctaneVPN.

 

I have no idea if what I did is correct but everything seems to be working now!  I wanted to share this information in case other runs in to the same issues.  I am open to comments or suggestions on how to do things correctly.

 

Thanks.

I am running UnRAID 5.0-rc11

I am open to comments or suggestions on how to do things correctly.

Nothing to add pertaining to the VPN setup, but why are you running such an old version of unraid?