A few months ago I installed openvpn server and it worked fine. Then I stopped using it for a while.
Last week I updated freebsd from version 10.0 to 10.1 and noticed that openvpn doesn't start after rebooting:
Starting openvpn.
/usr/local/etc/rc.d/openvpn: WARNING: failed to start openvpn
openvpn.log:
Wed Jan 7 19:58:31 2015 OpenVPN 2.3.6 i386-portbld-freebsd10.1 [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Jan 4 2015
Wed Jan 7 19:58:31 2015 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Wed Jan 7 19:58:31 2015 SSL_CTX_set_tmp_dh: error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not seeded: error:05067003:Diffie-Hellman routines:GENERATE_KEY:BN lib: error:14085005:SSL routines:SSL3_CTX_CTRL:DH lib
Wed Jan 7 19:58:31 2015 Exiting due to fatal error
I have no idea what does it mean. Google couldn't help me so I tried to reinstall openvpn:
cd /usr/ports/security/openvpn && make reinstall
When compiling openvpn cannot pass tests:
=========================================
OpenVPN 2.3.6: tests/test-suite.log
=========================================
# TOTAL: 3
# PASS: 0
# SKIP: 1
# XFAIL: 0
# FAIL: 2
# XPASS: 0
# ERROR: 0
.. contents:: :depth: 2
SKIP: t_client.sh
=================
./t_client.sh: cannot find 't_client.rc' in build dir ('..')
./t_client.sh: or source directory ('.'). SKIPPING TEST.
FAIL: t_lpback.sh
=================
Wed Jan 7 20:16:13 2015 ERROR: Random number generator cannot obtain entropy for key generation
Wed Jan 7 20:16:13 2015 Exiting due to fatal error
FAIL: t_cltsrv.sh
=================
The following test will take about two minutes.
If the addresses are in use, this test will retry up to two times.
Wed Jan 7 20:16:13 2015 OpenVPN 2.3.6 i386-portbld-freebsd10.1 [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Jan 5 2015
Wed Jan 7 20:16:13 2015 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Wed Jan 7 20:16:13 2015 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Jan 7 20:16:13 2015 OpenVPN 2.3.6 i386-portbld-freebsd10.1 [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Jan 5 2015
Wed Jan 7 20:16:13 2015 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Wed Jan 7 20:16:13 2015 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Jan 7 20:16:13 2015 SSL_CTX_set_tmp_dh: error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not seeded: error:05067003:Diffie-Hellman routines:GENERATE_KEY:BN lib: error:14085005:SSL routines:SSL3_CTX_CTRL:DH lib
Wed Jan 7 20:16:13 2015 Exiting due to fatal error
Wed Jan 7 20:16:13 2015 WARNING: file 'sample-keys/client.key' is group or others accessible
Wed Jan 7 20:16:13 2015 ERROR: Random number generator cannot obtain entropy for PRNG
Wed Jan 7 20:16:13 2015 Exiting due to fatal error
Please help me to solve the problem.
And sorry for my English.
