OpenVPN wont Start up Urgent!

teckins

Hi Everyone,

I tried to install openvpn by following this guide:

https://safesrv.net/install-openvpn-on-centos/

But Everytime I try to start OpenVPN up I get the following Error:

service openvpn restart
Shutting down openvpn:                                  [  OK  ]
Starting openvpn:                                          [FAILED]
root@serverhostname [/]#

Well I tried this command so many times with ip forwarding etc. but with no farther progress :oops:

Here is my log:

http://pastebin.com/E78DMcXE

My Config:

key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so
/etc/pam.d/login #- Comment this line if you are using FreeRADIUS
#plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf #-
Uncomment this line if you are using FreeRADIUS
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status 1194.log
verb 3

Please help me out I dont understand whats happening and I need it setup fast :x Thank you!

maikcat

how exactly did you installed openvpn?

can you post again your config?

Michael.

teckins

Hello,

I installed OpenVPN Copy + Pasting the commands from the following site:

https://safesrv.net/install-openvpn-on-centos/

My Config is currently the same:

http://pastebin.com/huF3pNNT

Thanks!

maikcat

    key /etc/openvpn/easy-rsa/2.0/keys/server.key
    dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
    plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so
    /etc/pam.d/login #- Comment this line if you are using FreeRADIUS
    #plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf #-
    Uncomment this line if you are using FreeRADIUS
    client-cert-not-required
    username-as-common-name
    server 10.8.0.0 255.255.255.0
    push "redirect-gateway def1"
    push "dhcp-option DNS 8.8.8.8"
    push "dhcp-option DNS 8.8.4.4"
    keepalive 5 30
    comp-lzo
    persist-key
    persist-tun
    status 1194.log
    verb 3

the ca,crt certs are missing...
the is no directive /etc/pam.d/login is one line like...

plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login

at least post the logs to find out why openvpn dont start..

also please post config and logs here not at pastebin...

if your config is the above ,it has errors...

regards
Michael.

teckins

Hello Maikcat,

I know the certificates are missing and its because i reinstalled openvpn and since it wont start there is no point of setting up the certificate until it starts. The Logs are very big so the forums wont let me post them its a character count issue. The config you posted in my config yes. Please tell me what config I must use then as all the sites I checked has the same config as this one. Please post the config if you can. Thanks

maikcat

I know the certificates are missing and its because i reinstalled openvpn and since it wont start there is no point of setting up the certificate until it starts.

how do you expect the openvpn service to start if you didnt create certificates?????

openvpn is a SSL/TLS based vpn if this rings a bell...

Michael.

teckins

Well I built all the certificates and edited my config to

port 1194 #- port
proto udp #- protocol
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
reneg-sec 0
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login #- Comment this line if you are using FreeRADIUS
#plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf #- Uncomment this line if you are using FreeRADIUS
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status 1194.log
verb 3

But its still the same.

root@serverhostname [/]# service openvpn restart
Shutting down openvpn: [ OK ]
Starting openvpn: [FAILED]
root@serverhostname [/]#

[deleted]

Send updated logs now that the cert error should be resolved. 🙂

teckins

Hello,

I tried to update everything then start it to see if it works, Here is the shell commands:

root@serverhostname [~]# yum update
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base: mirror.atlanticmetro.net
 * extras: mirror.atlanticmetro.net
 * rpmforge: mirror.us.leaseweb.net
 * updates: mirror.dattobackup.com
base                                                     | 1.1 kB     00:00
extras                                                   | 2.1 kB     00:00
rpmforge                                                 | 1.9 kB     00:00
updates                                                  | 1.9 kB     00:00
updates/primary_db                                       |  93 kB     00:00
Excluding Packages in global exclude list
Finished
Setting up Update Process
No Packages marked for Update
root@serverhostname [~]# service openvpn start
Starting openvpn:                                          [FAILED]
root@serverhostname [~]#

Still wont start 🙁.

Here are the most recent logs: http://pastebin.com/35DZs7dV

I think its this line thats the issue

2013-02-11 06:44:30+0300 [-] PortPool: port 953: [Errno 98] Address already in use (socket.error): util/sock:190,<string>:1

But my Config shows that it needs to start at port 1194. And there is no Application using Port 953 only cPanel is installed on the server so ... Thanks!

maikcat

are you trying to setup openvpn AS or open source edition..?

Michael.

teckins

I'm not sure i think its the As version i used

yum install openvpn -y

in ssh

maikcat

by default none repository have openvpn...

post the output of

rpm -qa | grep openvpn

which repo are you using?

Michael.

teckins

root@serverhostname [/]# rpm -qa | grep openvpn
openvpn-2.2.2-1.el5.rf
openvpn-as-1.8.4-CentOS5.5

maikcat

you have installed both of them....

please remove openvpn-as...

Michael.

[deleted]

Having both on the system will make it messy! Definitely remove AS.

teckins

It is still failing I removed the AS version with Yum. Hopeing a restart works. Will edit with logs after that!

Edit:

Here is the Command line:

root@serverhostname [~]# rpm -qa | grep openvpn
openvpn-2.2.2-1.el5.rf
root@serverhostname [~]#

Logs:

http://pastebin.com/rKg8Npy7

[deleted]

The first few lines say access server starting!

teckins

Hey Douglas,

It does not seem to start though, And I cant connect to it so ...

mwandelaar

2013-02-11 06:44:30+0300 [-] Log opened.
2013-02-11 06:44:30+0300 [-] twistd 9.0.0 (/usr/local/openvpn_as/bin/python 2.6.6) starting up.

I'm not familiair with the Access-Server packages, but it doesn't sound logical to me the files from the packages are in /usr/local
Is it possible there's still another application installed?

teckins

Hey Mwandelaar,

I dont think so I removed it all?