Linux ifconfig failed: external program exited with error

toddinpal

I'm trying to set up Raspbian to access my server and I'm getting the following error:

Linux ifconfig failed: external program exited with error status: 1

Here is my client.conf file:

client
topology subnet
dev tun
port 1194
proto udp
remote somesite.domain 1194
#nobind
ca /etc/openvpn/ca.crt
cert /etc/openvpn/pi.crt
key /etc/openvpn/pi.key
comp-lzo
persist-key
persist-tun
verb 3
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf
script-security 3 system

And this is what's in the daemon.log:

Dec 9 09:48:38 raspberrypi ovpn-client[17553]: OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Dec 1 2014
Dec 9 09:48:38 raspberrypi ovpn-client[17553]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Dec 9 09:48:38 raspberrypi ovpn-client[17553]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 9 09:48:38 raspberrypi ovpn-client[17553]: NOTE: --script-security method='system' is deprecated due to the fact that passed parameters will be subject to shell expansion
Dec 9 09:48:41 raspberrypi ovpn-client[17553]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Dec 9 09:48:41 raspberrypi ovpn-client[17553]: LZO compression initialized
Dec 9 09:48:41 raspberrypi ovpn-client[17553]: Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Dec 9 09:48:41 raspberrypi ovpn-client[17553]: Socket Buffers: R=[163840->131072] S=[163840->131072]
Dec 9 09:48:41 raspberrypi ovpn-client[17553]: Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Dec 9 09:48:41 raspberrypi ovpn-client[17553]: Local Options hash (VER=V4): '41690919'
Dec 9 09:48:41 raspberrypi ovpn-client[17553]: Expected Remote Options hash (VER=V4): '530fdded'
Dec 9 09:48:41 raspberrypi ovpn-client[17618]: UDPv4 link local (bound): [undef]
Dec 9 09:48:41 raspberrypi ovpn-client[17618]: UDPv4 link remote: [AF_INET]192.210.237.161:1194
Dec 9 09:48:41 raspberrypi ovpn-client[17618]: TLS: Initial packet from [AF_INET]192.210.237.161:1194, sid=f63a68ff 82e8da7e
Dec 9 09:48:41 raspberrypi ovpn-client[17618]: VERIFY OK: depth=1, /CN=scottlittle.me
Dec 9 09:48:41 raspberrypi ovpn-client[17618]: VERIFY OK: depth=0, /CN=server
Dec 9 09:48:43 raspberrypi ovpn-client[17618]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Dec 9 09:48:43 raspberrypi ovpn-client[17618]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Dec 9 09:48:43 raspberrypi ovpn-client[17618]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Dec 9 09:48:43 raspberrypi ovpn-client[17618]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Dec 9 09:48:43 raspberrypi ovpn-client[17618]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Dec 9 09:48:43 raspberrypi ovpn-client[17618]: [server] Peer Connection Initiated with [AF_INET]192.210.237.161:1194
Dec 9 09:48:45 raspberrypi ovpn-client[17618]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Dec 9 09:48:45 raspberrypi ovpn-client[17618]: PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.20 10.8.0.1'
Dec 9 09:48:45 raspberrypi ovpn-client[17618]: OPTIONS IMPORT: timers and/or timeouts modified
Dec 9 09:48:45 raspberrypi ovpn-client[17618]: OPTIONS IMPORT: --ifconfig/up options modified
Dec 9 09:48:45 raspberrypi ovpn-client[17618]: OPTIONS IMPORT: route options modified
Dec 9 09:48:45 raspberrypi ovpn-client[17618]: OPTIONS IMPORT: route-related options modified
Dec 9 09:48:45 raspberrypi ovpn-client[17618]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Dec 9 09:48:45 raspberrypi ovpn-client[17618]: ROUTE default_gateway=192.168.42.10
Dec 9 09:48:45 raspberrypi ovpn-client[17618]: TUN/TAP device tun0 opened
Dec 9 09:48:45 raspberrypi ovpn-client[17618]: TUN/TAP TX queue length set to 100
Dec 9 09:48:45 raspberrypi ovpn-client[17618]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Dec 9 09:48:45 raspberrypi ovpn-client[17618]: /sbin/ifconfig tun0 10.8.0.20 netmask 10.8.0.1 mtu 1500 broadcast 255.255.255.254
Dec 9 09:48:45 raspberrypi ovpn-client[17618]: Linux ifconfig failed: external program exited with error status: 1
Dec 9 09:48:45 raspberrypi ovpn-client[17618]: Exiting
Dec 9 09:48:45 raspberrypi ifplugd(tun0)[16271]: Exiting.

I've been unable to find out how to debug the "ifconfig failed" message. Any help would be appreciated.

Regards,
Todd

maikcat

are you running openvpn as root?

Michael.

Traffic

toddinpal wrotePUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.20 10.8.0.1'

In topology subnet your server should ifconfig-ush ip address netmask

Presumably, you are using a CCD file on your server and it should read like so (filename: client_common_name):

ifconfig-push 10.8.0.20 255.255.255.0