August 26, 201312 yr So far I can do updates and the server starts. I tried using the client but I won't connect. I went to McDonalds and used there Wi-Fi. I think I have to do something with my router. It is the newest version of DD-WRT so it should work I just have never opened ports or opened routes so kind of driving blind and don't want to open to much and cause a major security whole on my defenses. my server has 8TB used and I don't want to lose anything that is why I like the VPN plugin. I am using the hash options. I know it could be MC-Donald's security but I really doubt that I have used cisco VPN when I worked for a big company in MC-Donald's and it worked fine. Thornwood
August 26, 201312 yr When you are on your home network, go to www.canyouseeme.org and type in the port number (1194) if you haven't altered settings. This may show connection denied or timed out. If so you may have not opened the port correctly, the ISP is blocking it or a firewall is preventing it. Try changing to TCP 943 instead, I found this port works for me even though I had correctly opened 1194 and allowed it through the firewall
August 26, 201312 yr At long last and after many hours I am up and running. First of all (Peter) the config file created by the server in the zip needs much tweaking. If you want the example PM me and I will send you the two files the original and the modified one. Second because I have DD-WRT all the online data is concentrated in making the router the server. I don't like that set up I would rather open the right port. After much torment I found how to do this correctly and after that I was up. The web site can you see me went from timeout to rejected. That was the key that was needed to figure out. Thank you both for your help.
August 26, 201312 yr I forgot to mention that! I had to rewrite the client file before it would work. Did you upgrade to .19, I thought Peter had updated those bugs yesterday
August 26, 201312 yr Author Please upgrade and report what is not working, since latest version fixed some issue with client file.
August 28, 201312 yr Author I'm working to add a features to generate compatible files for Ios and android ...... Its OK to do it manually, the hard bit is how to send password from bash??? New version (1.1.21), now with a function to create iOS compatible client cert!, in the zip file for the client there is instruction and the password for the p12 file //Peter
August 28, 201312 yr Great this week I am very busy but soon I will be testing again. Thank you Peter
August 30, 201312 yr Author If anyone is interested, I have compiled final V5 with iptables, see post #1
September 2, 201312 yr If anyone is interested, I have compiled final V5 with iptables, see post #1 Is this needed for the OpenVPN plugin? Any other benefits of installing this?
September 2, 201312 yr Author Right now it's no need at all, maybe if we need to set up a firewall on unraid, this might be a good idea, but I have no experiences of this anyway, maybe someone else now about t this and can tell if this is necessary or not. //Peter
September 2, 201312 yr Thanks Peter, Still some minor issues when creating the client certificate - will send you the details.
September 2, 201312 yr Cant add client and start server, there green ticks are ok but i m getting this error. both "Path to store server config and cert's" & "CERT: Path to store the cert's" are configured. Adding client: client1 WARNING: can't open config file: /usr/lib/ssl/openssl.cnf WARNING: can't open config file: /usr/lib/ssl/openssl.cnf WARNING: can't open config file: /usr/lib/ssl/openssl.cnf NOTE: If you run ./clean-all, I will be doing a rm -rf on /mnt/cache/No_move/server/easy-rsa-master/easy-rsa/2.0/keys /etc/rc.d/rc.openvpnserver: line 314: cd: /mnt/cache/No_move/server/easy-rsa-master/easy-rsa/2.0/keys: No such file or directory WARNING: can't open config file: /usr/lib/ssl/openssl.cnf Using Common Name: client1 Please edit the vars script to reflect your configuration, then source it with "source ./vars". Next, to start with a fresh PKI configuration and to delete any previous certificates and keys, run "./clean-all". Finally, you can run this tool (pkitool) to build certificates/keys. /etc/rc.d/rc.openvpnserver: line 322: /mnt/cache/No_move/server/easy-rsa-master/easy-rsa/2.0/keys/client1.ovpn: No such file or directory zip warning: name not matched: /mnt/cache/No_move/server/easy-rsa-master/easy-rsa/2.0/keys/client1.ovpn zip warning: name not matched: /mnt/cache/No_move/server/easy-rsa-master/easy-rsa/2.0/keys/client1.ovpn zip warning: name not matched: /mnt/cache/No_move/server/easy-rsa-master/easy-rsa/2.0/keys/client1.key zip warning: name not matched: /mnt/cache/No_move/server/easy-rsa-master/easy-rsa/2.0/keys/client1.crt zip warning: name not matched: /mnt/cache/No_move/server/easy-rsa-master/easy-rsa/2.0/keys/ca.crt zip error: Nothing to do! (/mnt/cache/No_move/openvpnserver_cert/clients/client1.zip) and when i push start no errors shown but wont start. i also i try to start from cmd line says OK started but not.
September 2, 201312 yr Cant add client and start server, there green ticks are ok but i m getting this error. both "Path to store server config and cert's" & "CERT: Path to store the cert's" are configured. Adding client: client1 WARNING: can't open config file: /usr/lib/ssl/openssl.cnf WARNING: can't open config file: /usr/lib/ssl/openssl.cnf WARNING: can't open config file: /usr/lib/ssl/openssl.cnf NOTE: If you run ./clean-all, I will be doing a rm -rf on /mnt/cache/No_move/server/easy-rsa-master/easy-rsa/2.0/keys /etc/rc.d/rc.openvpnserver: line 314: cd: /mnt/cache/No_move/server/easy-rsa-master/easy-rsa/2.0/keys: No such file or directory WARNING: can't open config file: /usr/lib/ssl/openssl.cnf Using Common Name: client1 Please edit the vars script to reflect your configuration, then source it with "source ./vars". Next, to start with a fresh PKI configuration and to delete any previous certificates and keys, run "./clean-all". Finally, you can run this tool (pkitool) to build certificates/keys. /etc/rc.d/rc.openvpnserver: line 322: /mnt/cache/No_move/server/easy-rsa-master/easy-rsa/2.0/keys/client1.ovpn: No such file or directory zip warning: name not matched: /mnt/cache/No_move/server/easy-rsa-master/easy-rsa/2.0/keys/client1.ovpn zip warning: name not matched: /mnt/cache/No_move/server/easy-rsa-master/easy-rsa/2.0/keys/client1.ovpn zip warning: name not matched: /mnt/cache/No_move/server/easy-rsa-master/easy-rsa/2.0/keys/client1.key zip warning: name not matched: /mnt/cache/No_move/server/easy-rsa-master/easy-rsa/2.0/keys/client1.crt zip warning: name not matched: /mnt/cache/No_move/server/easy-rsa-master/easy-rsa/2.0/keys/ca.crt zip error: Nothing to do! (/mnt/cache/No_move/openvpnserver_cert/clients/client1.zip) and when i push start no errors shown but wont start. i also i try to start from cmd line says OK started but not. I had the same issue. Reduce the directory name length. If I did /mnt/cache/OPVN for example it would work, if I did /mnt/changes/apps/openvpn_server it would not start
September 2, 201312 yr Hi, I am trying to install OpenVPN Server but I keep getting the following error: success file /boot/packages/lzo-2.03-i486-1.txz: downloading from http://slackware.cs.utah.edu/pub/slackware/slackware-13.37/slackware/l/lzo-2.03-i486-1.txz ... wget: error while loading shared libraries: libssl.so.0: cannot open shared object file: No such file or directory bad download, deleting Warning: unlink(/boot/packages/lzo-2.03-i486-1.txz): No such file or directory in /usr/local/sbin/installplg on line 70 here is the output of ls -l /usr/lib/libcrypto* /usr/lib/libssl* root@Ark:~# ls -l /usr/lib/libcrypto* /usr/lib/libssl* -rw-r--r-- 1 root root 3170066 2012-08-09 09:05 /usr/lib/libcrypto.a lrwxrwxrwx 1 root root 18 2013-09-02 16:26 /usr/lib/libcrypto.so -> libcrypto.so.1.0.0* lrwxrwxrwx 1 root root 18 2013-09-02 16:26 /usr/lib/libcrypto.so.1 -> libcrypto.so.1.0.0* lrwxrwxrwx 1 root root 28 2013-09-02 16:26 /usr/lib/libcrypto.so.1.0.0 -> ../../lib/libcrypto.so.1.0.0* -rw-r--r-- 1 root root 582970 2012-08-09 09:05 /usr/lib/libssl.a lrwxrwxrwx 1 root root 15 2013-09-02 16:26 /usr/lib/libssl.so -> libssl.so.1.0.0* lrwxrwxrwx 1 root root 15 2013-09-02 16:26 /usr/lib/libssl.so.1 -> libssl.so.1.0.0* lrwxrwxrwx 1 root root 25 2013-09-02 16:26 /usr/lib/libssl.so.1.0.0 -> ../../lib/libssl.so.1.0.0* Any help perhaps on solving this problem?
September 2, 201312 yr Author About missing openssl.cnf google : https://www.google.se/search?q=openvpn+missing+openssl.cnf&oq=openvpn+missing+openssl.cnf&aqs=chrome..69i57j0l2.4281j0&sourceid=chrome&ie=UTF-8#q=openvpn+openssl.cnf+missing You can work around it by setting the full path in your 'vars' file like this: Code: export KEY_CONFIG=/etc/openvpn/easy-rsa/2.0/openssl-1.0.0.cnf I need to look into this "fix", but there exixt different openssl package in several plugin, I need to add some logic to this Anyone that have any ide about this ? //Peter The path in exempel is not what i using , but you got the idea
September 2, 201312 yr Author I found this , any one can give this a try you will need to edit the 'whichopensslcnf' file You will now need to remove all instances of '[[:alnum:]]' from the file. This will allow it to properly detect the version of OpenSSL on your computer. The completed text after the changes have been made should look like this: #!/bin/sh cnf="$1/openssl.cnf" if [ "$OPENSSL" ]; then if $OPENSSL version | grep -E "0\.9\.6" > /dev/null; then cnf="$1/openssl-0.9.6.cnf" elif $OPENSSL version | grep -E "0\.9\.8" > /dev/null; then cnf="$1/openssl-0.9.8.cnf" elif $OPENSSL version | grep -E "1\.0\.[[:digit:]]" > /dev/null; then cnf="$1/openssl-1.0.0.cnf" else cnf="$1/openssl.cnf" fi fi echo $cnf if [ ! -r $cnf ]; then echo "**************************************************************" >&2 echo " No $cnf file could be found" >&2 echo " Further invocations will fail" >&2 echo "**************************************************************" >&2 fi exit 0
September 2, 201312 yr Author Hi, I am trying to install OpenVPN Server but I keep getting the following error: [code [/quote] works OK from here file /boot/packages/lzo-2.03-i486-1.txz: downloading from http://slackware.cs.utah.edu/pub/slackware/slackware-13.37/slackware/l/lzo-2.03-i486-1.txz ... 2013-09-02 18:45:54 URL:http://slackware.cs.utah.edu/pub/slackware/slackware-13.37/slackware/l/lzo-2.03-i486-1.txz [77988/77988] -> "/boot/packages/lzo-2.03-i486-1.txz" [1] success upgradepkg --install-new /boot/packages/lzo-2.03-i486-1.txz ...
September 2, 201312 yr rexl: did you update the plugin? try any wget cmd if it runs ok? I just downloaded the plg from the begin post, first time of installing the OpenVPN Server Plugin. Even trying to download a simple wallpaper from wallbase doesn't work, keep getting the same error: wget: error while loading shared libraries: libssl.so.0: cannot open shared object file: No such file or directory
September 2, 201312 yr I found this , any one can give this a try you will need to edit the 'whichopensslcnf' file You will now need to remove all instances of '[[:alnum:]]' from the file. This will allow it to properly detect the version of OpenSSL on your computer. The completed text after the changes have been made should look like this: #!/bin/sh cnf="$1/openssl.cnf" if [ "$OPENSSL" ]; then if $OPENSSL version | grep -E "0\.9\.6" > /dev/null; then cnf="$1/openssl-0.9.6.cnf" elif $OPENSSL version | grep -E "0\.9\.8" > /dev/null; then cnf="$1/openssl-0.9.8.cnf" elif $OPENSSL version | grep -E "1\.0\.[[:digit:]]" > /dev/null; then cnf="$1/openssl-1.0.0.cnf" else cnf="$1/openssl.cnf" fi fi echo $cnf if [ ! -r $cnf ]; then echo "**************************************************************" >&2 echo " No $cnf file could be found" >&2 echo " Further invocations will fail" >&2 echo "**************************************************************" >&2 fi exit 0 first i try to shorten the path the error changed a little but still cant find the openssl.cnf. after i try editing 'whichopensslcnf' file but error is same do i have to do smtg after editing the file? last form of the error msg: Adding client: client1 WARNING: can't open config file: /usr/lib/ssl/openssl.cnf WARNING: can't open config file: /usr/lib/ssl/openssl.cnf WARNING: can't open config file: /usr/lib/ssl/openssl.cnf NOTE: If you run ./clean-all, I will be doing a rm -rf on /mnt/cache/No_move/opn_cert/keys WARNING: can't open config file: /usr/lib/ssl/openssl.cnf Using Common Name: client1 pkitool: Need a readable ca.crt and ca.key in /mnt/cache/No_move/opn_cert/keys Try pkitool --initca to build a root certificate/key. zip warning: name not matched: /mnt/cache/No_move/opn_cert/keys/client1.key zip warning: name not matched: /mnt/cache/No_move/opn_cert/keys/client1.crt zip warning: name not matched: /mnt/cache/No_move/opn_cert/keys/ca.crt adding: client1.ovpn (deflated 27%)
September 2, 201312 yr rexl: did you update the plugin? try any wget cmd if it runs ok? I just downloaded the plg from the begin post, first time of installing the OpenVPN Server Plugin. Even trying to download a simple wallpaper from wallbase doesn't work, keep getting the same error: wget: error while loading shared libraries: libssl.so.0: cannot open shared object file: No such file or directory 1) remove the plugin file from boot/config/plugins/ 2) restart unraid 3) install plugin again 4) update plg from webgui settings/open vpn server thats how i get rid of that error.
September 2, 201312 yr Author is it working if you do it from the prompt ? /etc/rc.d/rc.openvpnserver add_client peter
September 2, 201312 yr is it working if you do it from the prompt ? /etc/rc.d/rc.openvpnserver add_client peter nope root@Tower:~# /etc/rc.d/rc.openvpnserver add_client peter Adding client: peter WARNING: can't open config file: /usr/lib/ssl/openssl.cnf WARNING: can't open config file: /usr/lib/ssl/openssl.cnf WARNING: can't open config file: /usr/lib/ssl/openssl.cnf NOTE: If you run ./clean-all, I will be doing a rm -rf on /mnt/cache/No_move/opn_cert/keys WARNING: can't open config file: /usr/lib/ssl/openssl.cnf Using Common Name: peter pkitool: Need a readable ca.crt and ca.key in /mnt/cache/No_move/opn_cert/keys Try pkitool --initca to build a root certificate/key. zip warning: name not matched: /mnt/cache/No_move/opn_cert/keys/peter.key zip warning: name not matched: /mnt/cache/No_move/opn_cert/keys/peter.crt zip warning: name not matched: /mnt/cache/No_move/opn_cert/keys/ca.crt adding: peter.ovpn (deflated 26%)
September 2, 201312 yr Author strange ... for me it looks like this /etc/rc.d/rc.openvpnserver add_client peter11 Adding client: peter11 NOTE: If you run ./clean-all, I will be doing a rm -rf on /mnt/disk1/openvpnserver_cert/keys Using Common Name: peter11 Generating a 2048 bit RSA private key ....................................................................+++ .......................................+++ writing new private key to 'peter11.key' ----- Using configuration from /mnt/disk1/server/easy-rsa-master/easy-rsa/2.0/openssl-1.0.0.cnf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows countryName :PRINTABLE:'SE' stateOrProvinceName :PRINTABLE:'ELSEWHERE' localityName :PRINTABLE:'NOWHERE' organizationName :PRINTABLE:'IT-DIVISION' organizationalUnitName:PRINTABLE:'VPN-CLIENT' commonName :PRINTABLE:'peter11' name :PRINTABLE:'EasyRSA' emailAddress :IA5STRING:'[email protected]' Certificate is to be certified until Aug 31 17:26:23 2023 GMT (3650 days) Write out database with 1 new entries Data Base Updated adding: peter11.ovpn (deflated 32%) adding: peter11.key (deflated 23%) adding: peter11.crt (deflated 47%) adding: ca.crt (deflated 36%) adding: ta.key (deflated 40%) root@Tower-VM:/boot/config/plugins#
Archived
This topic is now archived and is closed to further replies.