Hi, I am trying to set up OpenVPN between a client running OpenWRT and a server running Ubuntu 12.04 LTS.
I didn't build the OpenWRT but it is running the latest OpenVPN software:
root@OpenWrt:~# openvpn --version
OpenVPN 2.3.4 mips-openwrt-linux-gnu [LZO] [EPOLL] [MH] [IPv6] built on Sep 1 2014
library versions: , LZO 2.06
Originally developed by James Yonan
Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <sales@openvpn.net>
I have confirmed the server is working as I am able to establish a VPN to it from another system.
Having followed the instructions at
http://wiki.openwrt.org/doc/howto/vpn.openvpn I have ended up with this configuration:
root@OpenWrt:~# uci show openvpn
openvpn.board=openvpn
openvpn.board.enabled=1
openvpn.board.dev=tun
openvpn.board.proto=udp
openvpn.board.log=/tmp/openvpn.log
openvpn.board.ca=/etc/openvpn/ca.crt
openvpn.board.cert=/etc/openvpn/board.crt
openvpn.board.key=/etc/openvpn/board.key
openvpn.board.client=1
openvpn.board.remote_cert_tls=server
openvpn.board.remote=vpn.mydomain.com.au 11789
openvpn.board.verb=9
(The verb=9 was my attempt to get any logging at all, I'll set it back to 3 when I have it working.)
When I try to start OpenVPN on the OpenWRT client it creates the file
/tmp/etc/openvpn-board.conf which contains:
client
ca /etc/openvpn/ca.crt
cert /etc/openvpn/board.crt
dev tun
key /etc/openvpn/board.key
log /tmp/openvpn.log
proto udp
remote vpn.mydomain.com.au 11789
remote-cert-tls server
verb 9
But it stops as soon as it starts ...
root@OpenWrt:~# /etc/init.d/openvpn start
root@OpenWrt:~#
... and doesn't create the log file /tmp/openvpn.log.
Eventually I found this in the OpenWRT syslog equivalent:
Wed Sep 3 04:31:18 2014 daemon.err openvpn(board)[12908]: Options error: Unrecognized option or missing parameter(s) in openvpn-board.conf:1: client (2.3.4)
Wed Sep 3 04:31:18 2014 daemon.warn openvpn(board)[12908]: Use --help for more information.
Which implies that there should be more on the first line of the config file other than the one word 'client'.
Unfortunately, trying to run 'openvpn --help' produces the annoying error "User message not available".
Thanks,