nvyaniv
Hi all,
I have been trying to setup a OpenVPN server on my Raspberry Pi 2 but I have had several issues.
I have resolved most of it over the past 2 weeks. But I finally reached, what I think is the last issue to resolve.
I have run a debug and placed the result below with some info removed. (i dont know if it was important or not)
Feel free to let me knwo if you need more info.
:::: PiVPN debug ::::
=============================================
:::: Latest commit ::::
=============================================
:::: Installation settings ::::
/etc/pivpn/DET_PLATFORM -> Raspbian
/etc/pivpn/FORWARD_CHAIN_EDITED -> 1
/etc/pivpn/HELP_SHOWN ->
/etc/pivpn/INPUT_CHAIN_EDITED -> 1
/etc/pivpn/INSTALL_PORT -> 443
/etc/pivpn/INSTALL_PROTO -> tcp
/etc/pivpn/INSTALL_USER -> pi
/etc/pivpn/NO_UFW -> 1
/etc/pivpn/pivpnINTERFACE -> eth0
=============================================
:::: setupVars file shown below ::::
INSTALL_USER=pi
UNATTUPG=unattended-upgrades
pivpnInterface=eth0
IPv4dns=
IPv4addr=192.168.0.122
IPv4gw=192.168.0.1
pivpnProto=tcp
PORT=443
ENCRYPT=1024
APPLY_TWO_POINT_FOUR=false
DOWNLOAD_DH_PARAM=false
PUBLICDNS=REMOTE
OVPNDNS1=8.8.8.8
OVPNDNS2=8.8.4.4
=============================================
:::: Server configuration shown below ::::
dev tun
proto tcp
port 443
ca /etc/openvpn/easy-rsa/pki/ca.crt
cert /etc/openvpn/easy-rsa/pki/issued/raspberrypi_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.crt
key /etc/openvpn/easy-rsa/pki/private/raspberrypi_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.key
dh /etc/openvpn/easy-rsa/pki/dh1024.pem
topology subnet
server 192.168.0.1 255.255.255.0
# Set your primary domain name server address for clients
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
# Prevent DNS leaks on Windows
push "block-outside-dns"
# Override the Client default gateway by using 0.0.0.0/1 and
# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of
# overriding but not wiping out the original default gateway.
push "redirect-gateway def1"
client-to-client
keepalive 1800 3600
remote-cert-tls client
tls-version-min 1.2
tls-auth /etc/openvpn/easy-rsa/pki/ta.key 0
cipher xxx-xxx-xxx
auth xxxxxx
user nobody
group nogroup
persist-key
persist-tun
crl-verify /etc/openvpn/crl.pem
status /var/log/openvpn-status.log 20
status-version 3
syslog
verb 3
#DuplicateCNs allow access control on a less-granular, per user basis.
#Remove # if you will manage access by user instead of device.
#duplicate-cn
# Generated for use by PiVPN.io
=============================================
:::: Client template file shown below ::::
client
dev tun
proto tcp
remote REMOTE 443
resolv-retry infinite
nobind
persist-key
persist-tun
key-direction 1
remote-cert-tls server
tls-version-min 1.2
verify-x509-name raspberrypi_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx name
cipher xxx-xxx-xxx
auth xxxxxx
auth-nocache
verb 3
=============================================
:::: Recursive list of files in ::::
::: /etc/openvpn/easy-rsa/pki shows below :::
/etc/openvpn/easy-rsa/pki/:
ca.crt
crl.pem
Default.txt
dh1024.pem
extensions.temp
index.txt
index.txt.attr
index.txt.attr.old
index.txt.old
issued
openssl-easyrsa.cnf
private
renewed
revoked
safessl-easyrsa.cnf
serial
serial.old
ta.key
test3.ovpn
/etc/openvpn/easy-rsa/pki/issued:
raspberrypi_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.crt
test3.crt
/etc/openvpn/easy-rsa/pki/private:
ca.key
raspberrypi_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.key
test3.key
/etc/openvpn/easy-rsa/pki/renewed:
private_by_serial
reqs_by_serial
/etc/openvpn/easy-rsa/pki/renewed/private_by_serial:
/etc/openvpn/easy-rsa/pki/renewed/reqs_by_serial:
/etc/openvpn/easy-rsa/pki/revoked:
private_by_serial
reqs_by_serial
/etc/openvpn/easy-rsa/pki/revoked/private_by_serial:
/etc/openvpn/easy-rsa/pki/revoked/reqs_by_serial:
=============================================
:::: Self check ::::
:: [OK] IP forwarding is enabled
:: [OK] Iptables MASQUERADE rule set
:: [OK] Iptables INPUT rule set
:: [OK] Iptables FORWARD rule set
:: [OK] OpenVPN is running
:: [OK] OpenVPN is enabled (it will automatically start on reboot)
Done
[INFO] Run pivpn -d again to see if we detect issues
=============================================
:::: Snippet of the server log ::::
Dec 13 02:30:41 raspberrypi ovpn-server[9851]: Options error: --server directive network/netmask combination is invalid
Dec 13 02:30:41 raspberrypi ovpn-server[9851]: Use --help for more information.
Dec 13 02:30:47 raspberrypi ovpn-server[9854]: Options error: --server directive network/netmask combination is invalid
Dec 13 02:30:47 raspberrypi ovpn-server[9854]: Use --help for more information.
Dec 13 02:30:52 raspberrypi ovpn-server[9857]: Options error: --server directive network/netmask combination is invalid
Dec 13 02:30:52 raspberrypi ovpn-server[9857]: Use --help for more information.
Dec 13 02:30:58 raspberrypi ovpn-server[9860]: Options error: --server directive network/netmask combination is invalid
Dec 13 02:30:58 raspberrypi ovpn-server[9860]: Use --help for more information.
Dec 13 02:31:04 raspberrypi ovpn-server[9863]: Options error: --server directive network/netmask combination is invalid
Dec 13 02:31:04 raspberrypi ovpn-server[9863]: Use --help for more information.
Dec 13 02:31:09 raspberrypi ovpn-server[9867]: Options error: --server directive network/netmask combination is invalid
Dec 13 02:31:09 raspberrypi ovpn-server[9867]: Use --help for more information.
Dec 13 02:31:14 raspberrypi ovpn-server[9870]: Options error: --server directive network/netmask combination is invalid
Dec 13 02:31:14 raspberrypi ovpn-server[9870]: Use --help for more information.
Dec 13 02:31:20 raspberrypi ovpn-server[9873]: Options error: --server directive network/netmask combination is invalid
Dec 13 02:31:20 raspberrypi ovpn-server[9873]: Use --help for more information.
Dec 13 02:31:25 raspberrypi ovpn-server[9876]: Options error: --server directive network/netmask combination is invalid
Dec 13 02:31:25 raspberrypi ovpn-server[9876]: Use --help for more information.
Dec 13 02:31:31 raspberrypi ovpn-server[9879]: Options error: --server directive network/netmask combination is invalid
Dec 13 02:31:31 raspberrypi ovpn-server[9879]: Use --help for more information.
=============================================
:::: Debug complete ::::
Any help would be appreciated.
