Can't seem to set up [i]tls-crypt-v2-verify metacheck[/i] while [i]chroot jail[/i] is on. If i comment out [i]chroot jail[/i] everything is ok, but with it I get: [quote] 2023-12-06 xx:xx:xx us=525116 xxx.xxx.xxx.xxx:xxxxx WARNING: Failed running command (--tls-crypt-v2-verify): could not execute external program [/quote] File [i]metacheck[/i] is simple script just to make this work. [i]#!/bin/bash echo "######### WORKS #########" exit 0[/i] I've placed [i]metacheck[/i] file in [i]/etc/openvpn/[/i] and in [i]/etc/openvpn/jail/[/i] folders. Did [i]chmod -R 777 /etc/openvpn[/i] while testing. [oconf=Server Config Snip] chroot jail tls-crypt-v2-verify metacheck script-security 2 [/oconf]

Found solution. Openvpn needs bash binary inside chroot folder to run custom scripts. Thought openvpn copies [i]/bin/bash[/i] by itself to chroot folder, but i was wrong. So i had to copy it myself. 1. Copy bash binary to [i]chroot/path/bin/[/i]. 2. Find required libraries with [i]ldd /bin/bash[/i] and add them to chroot folder. 3. Check if you can chroot into folder with [i]chroot path/to/folder[/i]. Afterwards if permissions and script is ok, it should work.

[Solved] Need help with tls-crypt-v2-verify and chroot.

Kalibri

Can't seem to set up tls-crypt-v2-verify metacheck while chroot jail is on.
If i comment out chroot jail everything is ok, but with it I get:

2023-12-06 xx:xx:xx us=525116 xxx.xxx.xxx.xxx:xxxxx WARNING: Failed running command (--tls-crypt-v2-verify): could not execute external program

File metacheck is simple script just to make this work.

#!/bin/bash
echo "######### WORKS #########"
exit 0

I've placed metacheck file in /etc/openvpn/ and in /etc/openvpn/jail/ folders.
Did chmod -R 777 /etc/openvpn while testing.

chroot jail
tls-crypt-v2-verify metacheck
script-security 2

Kalibri

Found solution.

Openvpn needs bash binary inside chroot folder to run custom scripts.
Thought openvpn copies /bin/bash by itself to chroot folder, but i was wrong. So i had to copy it myself.

1. Copy bash binary to chroot/path/bin/.
2. Find required libraries with ldd /bin/bash and add them to chroot folder.
3. Check if you can chroot into folder with chroot path/to/folder.

Afterwards if permissions and script is ok, it should work.