Good Morning,
I am receiving the following error
Apr 24 02:40:07 Stacy openvpn[20159]: /sbin/ip addr del dev tun0 local 10.8.0.10 peer 10.8.0.9
Apr 24 02:40:07 Stacy openvpn[20159]: SIGTERM[hard,] received, process exiting
Apr 24 02:40:09 Stacy openvpn[20217]: OpenVPN 2.3.2 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Sep 12 2013
Apr 24 02:40:09 Stacy openvpn[20217]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Apr 24 02:40:09 Stacy openvpn[20217]: WARNING: file 'stacy.key' is group or others accessible
Apr 24 02:40:09 Stacy openvpn[20217]: Socket Buffers: R=[87380->131072] S=[16384->131072]
Apr 24 02:40:09 Stacy openvpn[20218]: Attempting to establish TCP connection with [AF_INET]107.161.181.16:443 [nonblock]
Apr 24 02:40:09 Stacy openvpn[20221]: Options error: --dh fails with 'dh.pem': Permission denied
Apr 24 02:40:09 Stacy openvpn[20221]: Options error: --ca fails with '/etc/openvpn/ca.crt': Permission denied
Apr 24 02:40:09 Stacy openvpn[20221]: Options error: --cert fails with '/etc/openvpn/server.crt': Permission denied
Apr 24 02:40:09 Stacy openvpn[20221]: Options error: --key fails with '/etc/openvpn/server.key': Permission denied
Apr 24 02:40:09 Stacy openvpn[20221]: Options error: --status fails with '/var/log/openvpn-status.log': Permission denied
Apr 24 02:40:09 Stacy openvpn[20221]: Options error: Please correct these errors.
Apr 24 02:40:09 Stacy openvpn[20221]: Use --help for more information.
Apr 24 02:40:10 Stacy openvpn[20218]: TCP connection established with [AF_INET]107.161.181.16:443
Apr 24 02:40:10 Stacy openvpn[20218]: TCPv4_CLIENT link local: [undef]
Apr 24 02:40:10 Stacy openvpn[20218]: TCPv4_CLIENT link remote: [AF_INET]107.161.181.16:443
Apr 24 02:40:10 Stacy openvpn[20218]: TLS: Initial packet from [AF_INET]107.161.181.16:443, sid=9da54e8a ed128e6d
Apr 24 02:40:10 Stacy openvpn[20218]: VERIFY OK: depth=1, CN=Lindsey
Apr 24 02:40:10 Stacy openvpn[20218]: VERIFY OK: depth=0, CN=server
Apr 24 02:40:10 Stacy openvpn[20218]: WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1592', remote='link-mtu 1560'
Apr 24 02:40:10 Stacy openvpn[20218]: WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1532', remote='tun-mtu 1500'
Apr 24 02:40:10 Stacy openvpn[20218]: Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Apr 24 02:40:10 Stacy openvpn[20218]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Apr 24 02:40:10 Stacy openvpn[20218]: Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Apr 24 02:40:10 Stacy openvpn[20218]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Apr 24 02:40:10 Stacy openvpn[20218]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Apr 24 02:40:10 Stacy openvpn[20218]: [server] Peer Connection Initiated with [AF_INET]107.161.181.16:443
Arlion! That looks like it connected. Well, one of the connections did, the secondary one did not. Due to a permission error.
ls -la /etc/openvpn
total 60
drwxr-xr-x. 3 root root 4096 Apr 24 03:22 .
drwxr-xr-x. 64 root root 4096 Apr 24 01:59 ..
-rwxrwxrwx. 1 nobody nobody 1147 Apr 24 02:02 ca.crt
-rwxrwxrwx. 1 root root 1704 Apr 24 02:02 ca.key
-rwxrwxrwx. 1 root root 424 Apr 24 02:03 dh.pem
drwxr-xr-x. 8 root root 4096 Dec 23 13:36 easy-rsa-master
-rw-------. 1 root root 0 Apr 24 03:22 ipp.txt
-rw-r--r--. 1 root root 216 Apr 24 01:53 managment.conf
-rw-r--r--. 1 root root 1155 Apr 24 01:52 managment.crt
-rwxrwxrwx. 1 root root 347 Apr 24 03:22 server.conf
-rwxrwxrwx. 1 nobody nobody 4350 Apr 24 02:08 server.crt
-rwxrwxrwx. 1 nobody nobody 1704 Apr 24 02:08 server.key
-rw-r--r--. 1 root root 4334 Apr 21 19:59 stacy.crt
-rw-r--r--. 1 root root 1704 Apr 21 19:57 stacy.key
So i set all the files to chmod 777.
same error
so i set a few of the files to chown nobody:nobody
same error. nothing changed.
Not Working:
port 444
proto tcp
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh dh.pem
server 10.69.0.0 255.255.0.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
cipher AES-256-CBC
user nobody
group nobody
push "dhcp-option DNS 8.8.8.8"
push "redirect-gateway def1"
comp-lzo
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 4
Working
client
dev tun
proto tcp
remote 107.161.181.16 443
resolv-retry infinite
nobind
tun-mtu-extra 32
persist-key
persist-tun
ca managment.crt
cert stacy.crt
key stacy.key
comp-lzo
cipher AES-256-CBC
reneg-sec 0
verb 3
