Autostart is not working

MatejKovacic

I am running two OpenVPN services on the same machine (two different configurations).

One configuration is for OpenVPN listening on TCP 443 port, the other is listening on UDP 1194 port. The first has pool of client IP adresses 10.10.5.0/24 and the other 10.10.6.0/24. The first is using tun0 device, the other tun1 device. Both services use the same keys.

(Both network see each other, and I am also running dnsmasq locally).

The problem is, that when I reboot the server, OpenVPN services does not autostart. Actually, only the second one starts.

In /etc/default/openvpn I have AUTOSTART="all".

However, if I stop openvpn service manually and manually start openvpn and then dnsmasq, everything is working fine. It just not autostart - first the service with TCP443 config and then service with UDP1194 config.

Any idea?

MatejKovacic

Hi,

here is the relevant part from openvpn_tcp.log

(this is a log file from config: log /var/log/openvpn/openvpn_tcp.log, log-append /var/log/openvpn/openvpn_tcp.log)

OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 18 2013
NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Control Channel Authentication: using '/etc/openvpn/keys/ta.key' as a OpenVPN static key file
TUN/TAP device tun0 opened
do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
/sbin/ifconfig tun0 10.10.5.1 netmask 255.255.255.0 mtu 1500 broadcast 10.10.5.255
GID set to nogroup
UID set to nobody
Listening for incoming TCP connection on [undef]
TCPv4_SERVER link local (bound): [undef]
TCPv4_SERVER link remote: [undef]
Initialization Sequence Completed
Re-using SSL/TLS context
LZO compression initialized
TCP connection established with [AF_INET]xxx.xxx.xxx.xxx:19415
TCPv4_SERVER link local: [undef]
TCPv4_SERVER link remote: [AF_INET]xxx.xxx.xxx.xxx:19415
xxx.xxx.xxx.xxx:19415 [UbuntuTestClient] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:19415
UbuntuTestClient/xxx.xxx.xxx.xxx:19415 send_push_reply(): safe_cap=960
UbuntuTestClient/xxx.xxx.xxx.xxx:19415 Connection reset, restarting [0]
Re-using SSL/TLS context
LZO compression initialized
TCP connection established with [AF_INET]xxx.xxx.xxx.xxx:19423
TCPv4_SERVER link local: [undef]
TCPv4_SERVER link remote: [AF_INET]xxx.xxx.xxx.xxx:19423
xxx.xxx.xxx.xxx:19423 [UbuntuTestClient] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:19423
UbuntuTestClient/xxx.xxx.xxx.xxx:19423 send_push_reply(): safe_cap=960
UbuntuTestClient/xxx.xxx.xxx.xxx:19423 Connection reset, restarting [0]
...

From the log, I can't see any specific reason why connection does not autostart...

MatejKovacic

Any idea how to solve this...?

MatejKovacic

Server_TCP.conf:

port 443
port-share 127.0.0.1 4545
proto tcp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/Server.crt
key /etc/openvpn/keys/Server.key
dh /etc/openvpn/keys/dh4096.pem
tls-auth /etc/openvpn/keys/ta.key 0
crl-verify /etc/openvpn/keys/crl.pem
tls-cipher DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
server 10.10.5.0 255.255.255.0
persist-key
persist-tun
topology subnet
push "topology subnet"
push "redirect-gateway def1"
push "dhcp-option DNS 10.10.5.1"
persist-key
persist-tun
mtu-disc maybe
user nobody
group nogroup
client-config-dir /etc/openvpn/ccd_tcp
comp-lzo yes
push "comp-lzo yes"
keepalive 10 120
verb 0
status /var/log/openvpn/status_tcp.log
log /var/log/openvpn/openvpn_tcp.log
log-append /var/log/openvpn/openvpn_tcp.log

Server_UDP.conf:

port 1194
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/Server.crt
key /etc/openvpn/keys/Server.key
dh /etc/openvpn/keys/dh4096.pem
tls-auth /etc/openvpn/keys/ta.key 0
crl-verify /etc/openvpn/keys/crl.pem
tls-cipher DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
server 10.10.6.0 255.255.255.0
persist-key
persist-tun
topology subnet
push "topology subnet"
push "redirect-gateway def1"
push "dhcp-option DNS 10.10.6.1"
persist-key
persist-tun
mtu-disc maybe
user nobody
group nogroup
client-config-dir /etc/openvpn/ccd_udp
comp-lzo yes
push "comp-lzo yes"
keepalive 10 120
verb 0
status /var/log/openvpn/status_udp.log
log /var/log/openvpn/openvpn_udp.log
log-append /var/log/openvpn/openvpn_udp.log

MatejKovacic

I am using Debian.

And as I said:

MatejKovacic wrote In /etc/default/openvpn I have AUTOSTART="all".

I also tried with:

AUTOSTART="Server_TCP"
AUTOSTART="Server_UDP"

The problem still persists.

MatejKovacic

debbie10t wrote
debbie10t wrotePlease reboot and post configs and logs showing failure to start

Well, that is exactly a problem... I cannot find any log showing a failure.

OK, I will try to reboot the machine and see what happens, but last time I couldn't see anything suspicious...

MatejKovacic

Hmm, strange. Now it works, I mean OpenVPN starts normally. But I have found that dnsmasq does not autostart... OK, will try to resolve this. If you have any idea/solution, please let me know.

Thanks anyway for your help and patience. OpenVPN is a great software.