November 6, 20169 yr I'm getting this errors in the logs: Sun Nov 6 13:13:34 2016 OpenVPN 2.3.11 x86_64-slackware-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [MH] [iPv6] built on May 10 2016 Sun Nov 6 13:13:34 2016 library versions: OpenSSL 1.0.2j 26 Sep 2016, LZO 2.09 Sun Nov 6 13:13:34 2016 Diffie-Hellman initialized with 2048 bit key Sun Nov 6 13:13:34 2016 Control Channel Authentication: using '/mnt/cache/appdata/openvpn/ta.key' as a OpenVPN static key file Sun Nov 6 13:13:34 2016 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication Sun Nov 6 13:13:34 2016 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication Sun Nov 6 13:13:34 2016 Socket Buffers: R=[212992->212992] S=[212992->212992] Sun Nov 6 13:13:34 2016 ROUTE_GATEWAY 10.0.1.1/255.255.255.0 IFACE=br0 HWADDR=0c:c4:7a:ab:9d:8a Sun Nov 6 13:13:34 2016 TUN/TAP device tun0 opened Sun Nov 6 13:13:34 2016 TUN/TAP TX queue length set to 100 Sun Nov 6 13:13:34 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Sun Nov 6 13:13:34 2016 /usr/sbin/ip link set dev tun0 up mtu 1500 Sun Nov 6 13:13:34 2016 /usr/sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2 Sun Nov 6 13:13:34 2016 /usr/sbin/ip route add 10.8.0.0/24 via 10.8.0.2 Sun Nov 6 13:13:34 2016 GID set to users Sun Nov 6 13:13:34 2016 UID set to nobody Sun Nov 6 13:13:34 2016 UDPv4 link local (bound): [AF_INET]10.0.1.2:1194 Sun Nov 6 13:13:34 2016 UDPv4 link remote: [undef] Sun Nov 6 13:13:34 2016 MULTI: multi_init called, r=256 v=256 Sun Nov 6 13:13:34 2016 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0 Sun Nov 6 13:13:34 2016 IFCONFIG POOL LIST Sun Nov 6 13:13:34 2016 Initialization Sequence Completed Sun Nov 6 13:13:40 2016 46.222.134.96:5873 TLS: Initial packet from [AF_INET]XX.XXX.134.96:5873, sid=3ca69cfa f69da9a1 Sun Nov 6 13:13:41 2016 46.222.134.96:5873 CRL: cannot read: /mnt/cache/appdata/openvpn/crl.pem Sun Nov 6 13:13:41 2016 46.222.134.96:5873 OpenSSL: error:14089086:SSL routines:ssl3_get_client_certificate:certificate verify failed Sun Nov 6 13:13:41 2016 46.222.134.96:5873 TLS_ERROR: BIO read tls_read_plaintext error Sun Nov 6 13:13:41 2016 46.222.134.96:5873 TLS Error: TLS object -> incoming plaintext read error Sun Nov 6 13:13:41 2016 46.222.134.96:5873 TLS Error: TLS handshake failed Sun Nov 6 13:13:41 2016 46.222.134.96:5873 SIGUSR1[soft,tls-error] received, client-instance restarting Sun Nov 6 13:14:22 2016 46.222.134.96:5836 TLS: Initial packet from [AF_INET]XX.XXX.134.96:5836, sid=c682a3ce d81a11b9 Sun Nov 6 13:14:23 2016 46.222.134.96:5836 CRL: cannot read: /mnt/cache/appdata/openvpn/crl.pem Sun Nov 6 13:14:23 2016 46.222.134.96:5836 OpenSSL: error:14089086:SSL routines:ssl3_get_client_certificate:certificate verify failed Sun Nov 6 13:14:23 2016 46.222.134.96:5836 TLS_ERROR: BIO read tls_read_plaintext error Sun Nov 6 13:14:23 2016 46.222.134.96:5836 TLS Error: TLS object -> incoming plaintext read error Sun Nov 6 13:14:23 2016 46.222.134.96:5836 TLS Error: TLS handshake failed Sun Nov 6 13:14:23 2016 46.222.134.96:5836 SIGUSR1[soft,tls-error] received, client-instance restarting Sun Nov 6 13:14:42 2016 46.222.134.96:5886 TLS: Initial packet from [AF_INET]XX.XXX.134.96:5886, sid=41705585 9968dd36 Sun Nov 6 13:14:43 2016 46.222.134.96:5886 CRL: cannot read: /mnt/cache/appdata/openvpn/crl.pem Sun Nov 6 13:14:43 2016 46.222.134.96:5886 OpenSSL: error:14089086:SSL routines:ssl3_get_client_certificate:certificate verify failed Sun Nov 6 13:14:43 2016 46.222.134.96:5886 TLS_ERROR: BIO read tls_read_plaintext error Sun Nov 6 13:14:43 2016 46.222.134.96:5886 TLS Error: TLS object -> incoming plaintext read error Sun Nov 6 13:14:43 2016 46.222.134.96:5886 TLS Error: TLS handshake failed Sun Nov 6 13:14:43 2016 46.222.134.96:5886 SIGUSR1[soft,tls-error] received, client-instance restarting There's a place where it says Sun Nov 6 13:14:23 2016 46.222.134.96:5836 CRL: cannot read: /mnt/cache/appdata/openvpn/crl.pem I checked it and the file is there. I also checked with the "Fix common problems" plugin is there was some permission stuff wrong but it's not saying anything about that. I've used the single .ovpn file on my iPhone and I get to the point of "Connecting..." but it always gives me a time out. I also don't have firewalls enabled. It's driving me a bit crazy. Should I try to change the crl.pem file to 755 permission? I've the port 1194 UDP directed in my router to my unRaid address, see below: Any ideas on what's going on? thanks!
November 6, 20169 yr Author Hi, Can you try to install it from fresh folder and see what happens ? crl.pem is only created when you have revoked a client, have you done that? What unRAID version are you on? //Peter
November 6, 20169 yr Hi, Can you try to install it from fresh folder and see what happens ? crl.pem is only created when you have revoked a client, have you done that? What unRAID version are you on? //Peter Thanks for the reply! Yep, indeed I have added and removed users. Will try to re install from 0! My unRAID version is 6.2.3 Will report back in a bit!
November 6, 20169 yr Just tried it and it works perfectly now! maybe is some kind of bug? Thanks a lot!
December 6, 20169 yr Author How to install easy-rsa ? It's done from the user interface, just follow the steps to complete the installation.(also stated on the user interface when you installed the plugin) //peter
Archived
This topic is now archived and is closed to further replies.