Hi everyone,
I would like to have my digital ocean VM use a VPN for its outgoing http requests. I am using openVPN on Ubuntu 14.04.1 LTS (GNU/Linux 3.5.0-48-generic x86_64).
Got the files AirVPN_Europe_TCP-53.ovpn ca.crt ta.key user.crt user.key in one directory.
VPN is using TCP protocol on port 53. Also tried with UDP, same problem
also copied the files to /etc/openvpn/ to try to run it via openvpn start.
If I do that, I get the output:
root@tr:/home# sudo service openvpn start * Starting virtual private
network daemon(s)...
..but nothing happens. curl
http://www.ipchicken.com still reveals the servers ip
If I directly run
root@tr:/etc/openvpn# sudo openvpn AirVPN_Europe_TCP-53.ovpn
Thu Sep 18 09:42:35 2014 OpenVPN 2.3.2 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Feb 4 2014
Thu Sep 18 09:42:35 2014 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Thu Sep 18 09:42:35 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Sep 18 09:42:35 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Sep 18 09:42:35 2014 Socket Buffers: R=[87380->131072] S=[87380->131072]
Thu Sep 18 09:42:35 2014 Attempting to establish TCP connection with [AF_INET]95.211.186.65:53 [nonblock]
Thu Sep 18 09:42:36 2014 TCP connection established with [AF_INET]95.211.186.65:53
Thu Sep 18 09:42:36 2014 TCPv4_CLIENT link local: [undef]
Thu Sep 18 09:42:36 2014 TCPv4_CLIENT link remote: [AF_INET]95.211.186.65:53
Thu Sep 18 09:42:36 2014 TLS: Initial packet from [AF_INET]95.211.186.65:53, sid=d5ee74c0 46f1dcfd
Thu Sep 18 09:42:36 2014 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=
info@airvpn.org
Thu Sep 18 09:42:36 2014 Validating certificate key usage
Thu Sep 18 09:42:36 2014 ++ Certificate has key usage 00a0, expects 00a0
Thu Sep 18 09:42:36 2014 VERIFY KU OK
Thu Sep 18 09:42:36 2014 Validating certificate extended key usage
Thu Sep 18 09:42:36 2014 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Thu Sep 18 09:42:36 2014 VERIFY EKU OK
Thu Sep 18 09:42:36 2014 VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=
info@airvpn.org
Thu Sep 18 09:42:37 2014 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Thu Sep 18 09:42:37 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Sep 18 09:42:37 2014 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Thu Sep 18 09:42:37 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Sep 18 09:42:37 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA
Thu Sep 18 09:42:37 2014 [server] Peer Connection Initiated with [AF_INET]95.211.186.65:53
Thu Sep 18 09:42:39 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Thu Sep 18 09:42:40 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.9.0.1,comp-lzo no,route 10.9.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.9.0.254 10.9.0.253'
Thu Sep 18 09:42:40 2014 OPTIONS IMPORT: timers and/or timeouts modified
Thu Sep 18 09:42:40 2014 OPTIONS IMPORT: LZO parms modified
Thu Sep 18 09:42:40 2014 OPTIONS IMPORT: --ifconfig/up options modified
Thu Sep 18 09:42:40 2014 OPTIONS IMPORT: route options modified
Thu Sep 18 09:42:40 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Sep 18 09:42:40 2014 ROUTE_GATEWAY 178.62.192.1/255.255.192.0 IFACE=eth0 HWADDR=04:01:28:70:e1:01
Thu Sep 18 09:42:40 2014 TUN/TAP device tun0 opened
Thu Sep 18 09:42:40 2014 TUN/TAP TX queue length set to 100
Thu Sep 18 09:42:40 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Sep 18 09:42:40 2014 /sbin/ip link set dev tun0 up mtu 1500
Thu Sep 18 09:42:40 2014 /sbin/ip addr add dev tun0 local 10.9.0.254 peer 10.9.0.253
Thu Sep 18 09:42:40 2014 /sbin/ip route add 95.211.186.65/32 via 178.62.192.1
Thu Sep 18 09:42:40 2014 /sbin/ip route add 0.0.0.0/1 via 10.9.0.253
Thu Sep 18 09:42:40 2014 /sbin/ip route add 128.0.0.0/1 via 10.9.0.253
Write failed: Broken pipe
After that the VM is just completely down / frozen and I need to restart it. Really no clue on whats going wrong here and have been on this for hours. Any idea?
