February 5, 20188 yr Author 9 hours ago, FryGuy said: Gave it a shot. I must be putting the files in a wrong location or something. /mnt/user/appdata/myVPNserver or cache location and replaced the current easy-rsa folder but unable to generate certs and keys and tells me easy rsa not downloaded. even downloaded the latest easy-rsa from interface and then replaced all the similar named files with the v3.0.4 ones still the same. what the hell am i doing wrong? OK, Try this , Install easyrsa again. edit easyrsa, on line 900 change ... original -out "$pkcs_out" "$pkcs_opts" || die "\ edit ( remow the quotation marks" -out "$pkcs_out" $pkcs_opts || die "\ But preferred is a inline file. //Peter
February 5, 20188 yr 8 hours ago, peter_sm said: OK, Try this , Install easyrsa again. edit easyrsa, on line 900 change ... original -out "$pkcs_out" "$pkcs_opts" || die "\ edit ( remow the quotation marks" -out "$pkcs_out" $pkcs_opts || die "\ But preferred is a inline file. //Peter Fantastic, That fixed it! Thank you. Edited February 5, 20188 yr by FryGuy
February 11, 20188 yr When I try to generate the server certs and keys in the GUI, it works for a short while then stops. If I try to run the script from a terminal, it gets some errors after generating the cert shown here: cp: cannot stat '/mnt/user/appdata/openvpn/easy-rsa/easyrsa3/pki/ca.crt': No such file or directory cp: cannot stat '/mnt/user/appdata/openvpn/easy-rsa/easyrsa3/pki/issued/server.crt': No such file or directory cp: cannot stat '/mnt/user/appdata/openvpn/easy-rsa/easyrsa3/pki/private/server.key': No such file or directory chmod: cannot access '/mnt/user/appdata/openvpn/ca.crt': No such file or directory chmod: cannot access '/mnt/user/appdata/openvpn/server.crt': No such file or directory chmod: cannot access '/mnt/user/appdata/openvpn/server.key': No such file or directory Tried manipulating permissions. Set everything as 777. Not sure what's going on. Is there a log location I can check to get more info?
February 11, 20188 yr Author Did a fresh install and all looks ok, can you try to install outside “user”
February 11, 20188 yr No joy. Switched over to /mnt/cache/appdata and nothing different. Even removed the plug-in and reinstalled. Of course also removed the openvpn directory between attempts so I could let it re-create it. Please note this has always been present at the top of the output after answering 'yes' to confirm generating a fresh PKI: /usr/bin/expect: error while loading shared libraries: libexpect5.45.3.so: cannot open shared object file: No such file or directory /usr/bin/expect: error while loading shared libraries: libexpect5.45.3.so: cannot open shared object file: No such file or directory
February 11, 20188 yr Author Looks like your USB is broken , are you missing expect packages on /boot/packages ? Try to repair USBSkickat från min iPhone med Tapatalk
February 11, 20188 yr root@vault:/boot/packages# ls -lart total 3536 drwxrwxrwx 10 root root 16384 Feb 9 18:40 ../ -rwxrwxrwx 1 root root 2835436 Feb 9 18:40 tcl-8.6.8-x86_64-1.txz* -rwxrwxrwx 1 root root 298976 Feb 9 18:40 expect-5.45.3-x86_64-1.txz* -rwxrwxrwx 1 root root 414816 Feb 9 18:41 openvpn-2.4.4-x86_64-1.txz* drwxrwxrwx 2 root root 16384 Feb 9 18:41 ./ root@vault:/boot/packages# They are there. Any manual steps I can take to give it a nudge or at least force it to 'fail' if the USB is indeed broken? Also, I notice in the 'nerdpack' plugin, it shows that expect has an update available for it but I can't seem to install it. I wonder if there is a conflict between the nerd pack utils somehow. Edited February 11, 20188 yr by Chad Kunsman
February 11, 20188 yr Okay I installed it manually. I had already uninstalled the server plugin. I also set it to 'off' in the nerd pack plugin, hopefully to stop conflicts. Then I reinstalled the server plugin. The install script said expect was already installed, which is good. And the TCL install script seemed more verbose than before. At this point, everything worked. I'm not sure exactly what step solved it, but best guess is that the nerd pack was somehow interfering with the expect installation, but not 100% on that. Thanks for your help!
March 3, 20188 yr Author New version available. Have fun. 2018.03.03a Added support for Elliptic Curve crypto! After changing to EC or still using RSA you must.... Re-save settings on page "server config". Start to update with the default settings. RSA and EC have its own default settings. Create new server certs and clients. Added a drop box on "Cert and Misc Settings" for manually DL one of the available releases of easyrsa for manually install (Can be useful if default branch is broken) The list of TLS Ciphers is updated. Added -remote-cert-eku to server/client. The --remote-cert-eku ensures that a server will verify that the client certificate provided is truly a client certificate, and vice versa. Default settings are updated. Added cert/keys log to log page when generate the server cert/keys. Added a log file when creating new client in client folder. More settings for redirect-gateway in server settings. More info about EAsyRSA(Installed version, current version and commits date) Update of Tcl packages to tcl-8.6.8-x86_64-2 Update of expect packages to 5.45.4. 2018.03.03b Update of OpenVPN packages to 2.4.5 Added a link to OpenVPN Overview of changes. Edited March 3, 20188 yr by peter_sm
March 7, 20188 yr Is there a way to get pihole working with this? I have open vpn and pihole working seperately, but when I am on openvpn on my android pihole doesnt block anything. I tried push lan sub to the clients but it didnt stop ads on the phone. I see a few ways to do it editing the server.conf but cant seem to find it anywhere. Edited March 7, 20188 yr by alkiax
March 15, 20188 yr Hello.. Nice plugin, working fine with all traffic routed through but I'd like to only route traffic from specific IP's. I have enabled the 'route only specific ip adresses' but where to I add the IPs to route through openvpn client?
March 15, 20188 yr Author 3 hours ago, Madhouse said: Hello.. Nice plugin, working fine with all traffic routed through but I'd like to only route traffic from specific IP's. I have enabled the 'route only specific ip adresses' but where to I add the IPs to route through openvpn client? Look at first post :-) then --> More info about Client installation : //Peter
March 15, 20188 yr 52 minutes ago, peter_sm said: Look at first post :-) then --> More info about Client installation : //Peter ahh yes.. now i see. ThanksTo be able to use "Route specific IP through VPN tunnel" you first need to create this file webbadress.txt in /boot/openvpn
March 16, 20188 yr 11 hours ago, peter_sm said: Look at first post :-) then --> More info about Client installation : //Peter Sorry, but it is still not clear how to route specific dockers through openvpn. I've tried added the IP for the docker (which is running br0) but even though i have addd the ip adress to webbadress.txt all traffic seems to be routed through openvpn. any help would be greatly appreciated.
March 16, 20188 yr Author 1 hour ago, Madhouse said: Sorry, but it is still not clear how to route specific dockers through openvpn. I've tried added the IP for the docker (which is running br0) but even though i have addd the ip adress to webbadress.txt all traffic seems to be routed through openvpn. any help would be greatly appreciated. Hi, Don't know how to do that. What docker are you using? //Peter
March 16, 20188 yr 2 hours ago, peter_sm said: Hi, Don't know how to do that. What docker are you using? //Peter Maybe I've gotten it all wrong - my intentions was to run dockers like Radarr, Medusa and Transmission securely though openvpn, so that my own public IP was hidden. is that at all possible with this plugin?
March 16, 20188 yr Author 32 minutes ago, Madhouse said: Maybe I've gotten it all wrong - my intentions was to run dockers like Radarr, Medusa and Transmission securely though openvpn, so that my own public IP was hidden. is that at all possible with this plugin? No, you can't .Better to look at docker with VPN , there is a transmission docker with VPN functionality. //Peter Edited March 16, 20188 yr by peter_sm
March 16, 20188 yr Just now, peter_sm said: No, you can't .Better to look at docker with VPN , there is a transmission docker with VPN functionality. //Peter Thanks Peter - I'll do that.
March 19, 20188 yr Is it possible to run the OpenVPN server plugin completely independent from the array? All my disks are encrypted so I would like to be able to remote connect into the machine and decrypt it after it boots.
March 19, 20188 yr Author 56 minutes ago, huffsper said: Is it possible to run the OpenVPN server plugin completely independent from the array? All my disks are encrypted so I would like to be able to remote connect into the machine and decrypt it after it boots. You can add this line to end of your go file. Then it will start when booting. But this need you to have your config folder set up to your USB or UD /etc/rc.d/rc.openvpnserver start
March 20, 20188 yr 17 hours ago, peter_sm said: You can add this line to end of your go file. Then it will start when booting. But this need you to have your config folder set up to your USB or UD /etc/rc.d/rc.openvpnserver start Thanks! When connecting from a Linux machine I get "WARNING: No server certificate verification method has been enabled.". Shouldn't enabling tls-crypt prevent that message? Or is there something else I'm missing?
March 20, 20188 yr Author 3 hours ago, huffsper said: Thanks! When connecting from a Linux machine I get "WARNING: No server certificate verification method has been enabled.". Shouldn't enabling tls-crypt prevent that message? Or is there something else I'm missing? Sorry, can't debug this, try google and if you come up with an solution please let me know. Check openvpn forum for more help //Peter
March 20, 20188 yr 1 hour ago, peter_sm said: Sorry, can't debug this, try google and if you come up with an solution please let me know. Check openvpn forum for more help //Peter Here's documentation about the warning https://openvpn.net/index.php/open-source/documentation/howto.html#mitm The chance of me experiencing a MITM attack is probably 0,00001% so it's likely not worth the effort anyway.
March 21, 20188 yr I just set this up and im able to connect, however all I can access it the unraid gui. None of the dockers web ui such as sonarr and radarr I cannot access.
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.