Raspberry Pi 2 w/ OSMC + OpenVPN Server (failed to start)

pakitz1900

Good day!

I'm following this great guide by Yeghishe Piruzyan ( http://yeghishe.github.io/2015/08/19/installing-openvpn-in-osmc.html)

When I check the status:

systemctl status openvpn@server.service

it gives me this:

* openvpn@server.service - OpenVPN connection to server
   Loaded: loaded (/lib/systemd/system/openvpn@.service; disabled)
   Active: failed (Result: exit-code) since Sun 2016-01-31 15:11:56 PHT; 1 day 5h ago
  Process: 260 ExecStart=/usr/sbin/openvpn --daemon ovpn-%i --status /run/openvpn/%i.status 10 --cd /etc/openvpn --config /etc/openvpn/%i.conf (code=exited, status=1/FAILURE)

Jan 31 15:11:56 osmc ovpn-server[260]: Options error: --tls-auth fails with '/etc/openvpn/easy-rsa/keys/ta....ctory
Jan 31 15:11:56 osmc systemd[1]: openvpn@server.service: control process exited, code=exited status=1
Jan 31 15:11:56 osmc systemd[1]: Failed to start OpenVPN connection to server.
Jan 31 15:11:56 osmc systemd[1]: Unit openvpn@server.service entered failed state.
Hint: Some lines were ellipsized, use -l to show in full.

Here is my server.conf:

port 1194
proto udp
dev tun

ca      /etc/openvpn/easy-rsa/keys/ca.crt    # generated keys
cert    /etc/openvpn/easy-rsa/keys/server.crt
key     /etc/openvpn/easy-rsa/keys/server.key  # keep secret
dh      /etc/openvpn/easy-rsa/keys/dh2048.pem

tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0

server 10.9.8.0 255.255.255.0  # internal tun0 connection IP
ifconfig-pool-persist ipp.txt

keepalive 10 120

comp-lzo         # Compression - must be turned on at both end
persist-key
persist-tun

# To forward traffic
push "redirect-gateway def1 bypass-dhcp"
# For hostnames to resolve
push "dhcp-option DNS 192.168.1.1"

status /var/log/openvpn-status.log

verb 3  # verbose mode
client-to-client

Please help.

Traffic

Something about your ta.key:

pakitz1900 wroteJan 31 15:11:56 osmc ovpn-server[260]: Options error: --tls-auth fails with '/etc/openvpn/easy-rsa/keys/ta....ctory
Jan 31 15:11:56 osmc systemd[1]: openvpn@server.service: control process exited, code=exited status=1
Jan 31 15:11:56 osmc systemd[1]: Failed to start OpenVPN connection to server.
Jan 31 15:11:56 osmc systemd[1]: Unit openvpn@server.service entered failed state.
Hint: Some lines were ellipsized, use -l to show in full.

Follow the instructions from systemd ..

pakitz1900

Hi Traffic!

I will check this later tonight and will send an update.

Thank you.

pakitz1900

Hi Traffic!

Sorry, it took long for me to send an update. I go back to zero and installed OSMC. Again followed Yeghishe Piruzyan's guide and noticed I did some mistakes on my previous attempt. I also noticed that my ta.key is in the wrong location which is in the /etc/openvpn/easy-rsa and my server.conf is saying ta.key is found at /etc/openvpn/easy-rsa/keys. As a temporary solution, I edited my server.conf so that it can located my ta.key and here is the result:

osmc@osmc:~$ sudo systemctl status openvpn@server.service
* openvpn@server.service - OpenVPN connection to server
   Loaded: loaded (/lib/systemd/system/openvpn@.service; disabled)
   Active: active (running) since Thu 2016-02-04 02:32:20 PHT; 4min 25s ago
  Process: 246 ExecStart=/usr/sbin/openvpn --daemon ovpn-%i --status /run/openvpn/%i.status 10 --cd /etc/openvpn --config /etc/openvpn/%i.conf (code=exited, status=0/SUCCESS)
 Main PID: 308 (openvpn)
   CGroup: /system.slice/system-openvpn.slice/openvpn@server.service
           `-308 /usr/sbin/openvpn --daemon ovpn-server --status /run/openvpn/server.status 10 --cd /etc/openvpn --config /etc/openvpn/server.conf

Feb 04 02:32:20 osmc ovpn-server[246]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Feb 04 02:32:20 osmc ovpn-server[246]: /sbin/ip link set dev tun0 up mtu 1500
Feb 04 02:32:20 osmc ovpn-server[246]: /sbin/ip addr add dev tun0 local 10.9.8.1 peer 10.9.8.2
Feb 04 02:32:20 osmc ovpn-server[246]: /sbin/ip route add 10.9.8.0/24 via 10.9.8.2
Feb 04 02:32:20 osmc ovpn-server[308]: UDPv4 link local (bound): [undef]
Feb 04 02:32:20 osmc ovpn-server[308]: UDPv4 link remote: [undef]
Feb 04 02:32:20 osmc ovpn-server[308]: MULTI: multi_init called, r=256 v=256
Feb 04 02:32:20 osmc ovpn-server[308]: IFCONFIG POOL: base=10.9.8.4 size=62, ipv6=0
Feb 04 02:32:20 osmc ovpn-server[308]: IFCONFIG POOL LIST
Feb 04 02:32:20 osmc ovpn-server[308]: Initialization Sequence Completed

Now, I will be fixing this so that my ta.key will be in the correct location /etc/openvpn/easy-rsa/keys

Thank you, Traffic for pointing out my ta.key issue.