Hi everyone,
We are trying to set up an openvpn config given by our client on our raspberry PI 3 and this config works fine on windows but can't be activated on Debian. After more than 10 hours of research we decided to ask for your help. 😉
Here is the version of openVpn we are using : 2.4.0-6+deb9u3
and the version of Debian we are using : 9.11
I join you the config file and the activation log on debian and windows.
Vpn config (without certificates):
tls-client
dev tun
proto udp
comp-lzo
auth-nocache
float
nobind
ip xxx.yyy.zzz.202 xxx.yyy.zzz.201
route xxx.yyy.zzz.0 255.255.255.0 xxx.yyy.zzz.201
resolv-retry infinite
keepalive 50 150
explicit-exit-notify 1
#verb 3
Windows log:
Thu Mar 19 10:30:25 2020 disabling NCP mode (--ncp-disable) because not in P2MP client or server mode
Thu Mar 19 10:30:25 2020 OpenVPN 2.4.3 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jul 14 2017
Thu Mar 19 10:30:25 2020 Windows version 6.2 (Windows 8 or greater) 64bit
Thu Mar 19 10:30:25 2020 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.10
Thu Mar 19 10:30:26 2020 open_tun
Thu Mar 19 10:30:26 2020 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{*********************}.tap
Thu Mar 19 10:30:26 2020 Notified TAP-Windows driver to set a DHCP IP/netmask of xxx.yyy.zzz.202/255.255.255.252 on interface {*********************} [DHCP-serv: xxx.yyy.zzz.201, lease-time: 31536000]
Thu Mar 19 10:30:26 2020 Successful ARP Flush on interface [5] {*********************}
Thu Mar 19 10:30:26 2020 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Thu Mar 19 10:30:26 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.yyy.zzz.187:1194
Thu Mar 19 10:30:26 2020 UDP link local: (not bound)
Thu Mar 19 10:30:26 2020 UDP link remote: [AF_INET]xxx.yyy.zzz.187:1194
Thu Mar 19 10:30:30 2020 [ServerB1T4] Peer Connection Initiated with [AF_INET]xxx.yyy.zzz.187:1194
Thu Mar 19 10:30:36 2020 Initialization Sequence Completed
Debian log:
Mar 19 10:32:49 Serveur_raspberrypi NetworkManager[378]: <info> [1584610369.4042] audit: op="connection-activate" uuid="*********************" name="NameVpn" pid=21978 uid=0 result="success"
Mar 19 10:32:49 Serveur_raspberrypi NetworkManager[378]: <info> [1584610369.4261] vpn-connection[*********************,"NameVpn",0]: Started the VPN service, PID 21984
Mar 19 10:32:49 Serveur_raspberrypi NetworkManager[378]: <info> [1584610369.4772] vpn-connection*********************,"NameVpn",0]: Saw the service appear; activating connection
Mar 19 10:32:49 Serveur_raspberrypi NetworkManager[378]: <info> [1584610369.5694] vpn-connection[*********************,"NameVpn",0]: VPN plugin: state changed: starting (3)
Mar 19 10:32:49 Serveur_raspberrypi NetworkManager[378]: <info> [1584610369.5697] vpn-connection[*********************,"NameVpn",0]: VPN connection: (ConnectInteractive) reply received
Mar 19 10:32:49 Serveur_raspberrypi nm-openvpn[21987]: OpenVPN 2.4.0 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Oct 14 2018
Mar 19 10:32:49 Serveur_raspberrypi nm-openvpn[21987]: library versions: OpenSSL 1.0.2u 20 Dec 2019, LZO 2.08
Mar 19 10:32:49 Serveur_raspberrypi nm-openvpn[21987]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Mar 19 10:32:49 Serveur_raspberrypi nm-openvpn[21987]: TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.yyy.zzz.187:1194
Mar 19 10:32:49 Serveur_raspberrypi nm-openvpn[21987]: UDP link local: (not bound)
Mar 19 10:32:49 Serveur_raspberrypi nm-openvpn[21987]: UDP link remote: [AF_INET]xxx.yyy.zzz.187:1194
Mar 19 10:32:49 Serveur_raspberrypi nm-openvpn[21987]: NOTE: chroot will be delayed because of --client, --pull, or --up-delay
Mar 19 10:32:49 Serveur_raspberrypi nm-openvpn[21987]: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
[b]Mar 19 10:32:53 Serveur_raspberrypi nm-openvpn[21987]: WARNING: 'ifconfig' is present in remote config but missing in local config, remote='ifconfig xxx.yyy.zzz.202 xxx.yyy.zzz.201'[/b]
Mar 19 10:32:53 Serveur_raspberrypi nm-openvpn[21987]: [ServerB1T4] Peer Connection Initiated with [AF_INET]xxx.yyy.zzz.187:1194
Mar 19 10:32:54 Serveur_raspberrypi nm-openvpn[21987]: TUN/TAP device tun1 opened
Mar 19 10:32:54 Serveur_raspberrypi nm-openvpn[21987]: /usr/lib/NetworkManager/nm-openvpn-service-openvpn-helper --debug 0 21984 --bus-name org.freedesktop.NetworkManager.openvpn.Connection_52 --tun -- tun1 1500 1622 init
Mar 19 10:32:54 Serveur_raspberrypi NetworkManager[378]: <info> [1584610374.5341] manager: (tun1): new Tun device (/org/freedesktop/NetworkManager/Devices/34)
Mar 19 10:32:54 Serveur_raspberrypi NetworkManager[378]: <info> [1584610374.5848] devices added (path: /sys/devices/virtual/net/tun1, iface: tun1)
Mar 19 10:32:54 Serveur_raspberrypi NetworkManager[378]: <info> [1584610374.5850] device added (path: /sys/devices/virtual/net/tun1, iface: tun1): no ifupdown configuration found.
[b]Mar 19 10:32:54 Serveur_raspberrypi NetworkManager[378]: <warn> [1584610374.6361] vpn-connection[*********************,"NameVpn",0]: VPN plugin: failed: bad-ip-config (2)[/b]
Mar 19 10:32:54 Serveur_raspberrypi NetworkManager[378]: <warn> [1584610374.6414] vpn-connection[*********************,"NameVpn",0]: VPN plugin: failed: connect-failed (1)
Mar 19 10:32:54 Serveur_raspberrypi NetworkManager[378]: <info> [1584610374.6419] vpn-connection[*********************,"NameVpn",0]: VPN plugin: state changed: stopping (5)
Mar 19 10:32:54 Serveur_raspberrypi NetworkManager[378]: <info> [1584610374.6423] vpn-connection[*********************,"NameVpn",0]: VPN plugin: state changed: stopped (6)
Mar 19 10:32:54 Serveur_raspberrypi NetworkManager[378]: <info> [1584610374.6532] vpn-connection[*********************,"NameVpn",0]: VPN plugin: state change reason: unknown (0)
Mar 19 10:32:54 Serveur_raspberrypi nm-openvpn[21987]: WARNING: Failed running command (--up/--down): external program exited with error status: 1
Mar 19 10:32:54 Serveur_raspberrypi nm-openvpn[21987]: Exiting due to fatal error
Mar 19 10:32:54 Serveur_raspberrypi nm-openvpn-serv[21984]: ((libnm/nm-vpn-service-plugin.c:199)): assertion '<dropped>' failed
Mar 19 10:32:54 Serveur_raspberrypi nm-openvpn-serv[21984]: g_dbus_method_invocation_take_error: assertion 'error != NULL' failed
Mar 19 10:32:54 Serveur_raspberrypi NetworkManager[378]: <info> [1584610374.7333] devices removed (path: /sys/devices/virtual/net/tun1, iface: tun1)
Mar 19 10:32:54 Serveur_raspberrypi NetworkManager[378]: <info> [1584610374.7834] vpn-connection[*********************,"NameVpn",0]: VPN service disappeared
As you can see on the debian logs, their is a warnings that doesn't appear on the windows logs.
WARNING: 'ifconfig' is present in remote config but missing in local config, remote='ifconfig xxx.yyy.zzz.202 xxx.yyy.zzz.201'
I don't know if it is the cause of the problem but it result on a
failure due to bad-ip-config.
Note that the last vpn was working fine on debian. So it may not be an installation problem of openVpn on debian.
Do you have any idea to fix this problem ? 🙁
Thank you very much for your help.
live your best life.
bye
