ubn1 This is my first attempt to setup openvpn. I am running Ubuntu Server 11.04 (natty) I ran into a couple of errors when I tested my server setup and was hoping someone could steer me in the direction I need to take to get my vpn server running. 1) OpenVPN 2.1 requires '--script-security 2' or higher 2) cannot open openvpn-status.log for WRITE 3) cannot open ipp.txt for READ/WRITE 4) Cannot load private key file server.key: The output is listed below: -------------------------------------- user@natty1:/etc/openvpn$ openvpn server.conf Sat Sep 17 10:10:47 2011 OpenVPN 2.1.3 x86_64-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Mar 11 2011 Sat Sep 17 10:10:47 2011 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet. Sat Sep 17 10:10:47 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Sat Sep 17 10:10:47 2011 Note: cannot open openvpn-status.log for WRITE Sat Sep 17 10:10:47 2011 Note: cannot open ipp.txt for READ/WRITE Sat Sep 17 10:10:47 2011 Diffie-Hellman initialized with 1024 bit key Sat Sep 17 10:10:47 2011 Cannot load private key file server.key: error:0200100D:system library:fopen:Permission denied: error:20074002:BIO routines:FILE_CTRL:system lib: error:140B0002:SSL routines:SSL_CTX_use_PrivateKey_file:system lib Sat Sep 17 10:10:47 2011 Error: private key password verification failed Sat Sep 17 10:10:47 2011 Exiting
janjust post your server config file and perhaps we can tell you a bit more about what is going on...
ubn1 #/etc/openvpn/server.conf ################################################# # sample OpenVPN 2.0 config file for # # multi-client server. # ################################################# local 192.168.0.2 port 1194 proto udp dev tun ca ca.crt cert server.crt key server.key # This file should be kept secret dh dh1024.pem server 10.8.0.1 255.255.255.0 ifconfig-pool-persist ipp.txt push "dhcp-option DNS 10.8.0.1" push "dhcp-option WINS 10.8.0.1" keepalive 10 120 tls-auth ta.key 0 # This file is secret cipher BF-CBC comp-lzo max-clients 7 user nobody group nobody persist-key persist-tun status openvpn-status.log ;log openvpn.log log-append openvpn.log verb 4 ;mute 20
ubn1 I rebooted and see I received an additional error: user@natty1:~$ openvpn server.conf --help Options error: I'm trying to parse "server.conf" as an --option parameter but I don't see a leading '--'
ubn1 # user nobody # group nogroup commenting out the above did not work. user@natty1:/etc/openvpn$ openvpn server.conf Wed Sep 21 15:30:32 2011 Warning: Error redirecting stdout/stderr to --log file: /var/log/gadmin-openvpn/server/openvpn-server.log: Permission denied (errno=13) Wed Sep 21 15:30:32 2011 PLUGIN_INIT: could not load plugin shared object /usr/lib/openvpn/openvpn-pam-auth.so: /usr/lib/openvpn/openvpn-pam-auth.so: cannot open shared object file: No such file or directory: Permission denied (errno=13) Wed Sep 21 15:30:32 2011 Exiting
Mimiko Tha's it - permission denied. Verify under which user OpenVPN is starting and check file access for this user on every used file (see config file of OpenVPN).
janjust the command openvpn server.conf is Ubuntu/natty specific - what does the Ubuntu 'openvpn' script do? does it switch to another userid?
ubn1 Well I haven't had any success yet. I followed both of these walk-thru's a number of times and for some reason I can not get the server to run. http://openvpn.net/index.php/open-source/documentation/howto.html http://people.mandriva.com/~ybourhis/openvpn/ I think I will uninstall the openvpn server and start over from scratch again. Am I maybe following the wrong setup instructions? I even tried installing the gadmin-openvpn gui but no success there either.
Mimiko I see that every time you make any changes and actions, ypu get new errors. Something is wrong with your distro. I could start without problems openvpn on debian-lenny distro, that is very limited in function to run on coLinux under windows. So definately you can run openvpn if you whant. I can give a pack of openvpn which does need to be installed, and have needed libraries with it, you only will have to generate keys and config file. For start, uninstall openvpn, delete all asociated files, and do a clean install. Then if you encounter any problem, post log, and config file.
xz goal: run the program. installed 64-bit for my 64-bit Windows 7 OS. cannot open any part of the service, be the "generate a static vpn" (shows "openvpn Cannot open shared secret file 'C:\Program Files\OpenVPN\config\key.txt' for write: Access is denied. <errno=5>") or the "openvpn gui", which gives a create error. Can't find any files in files\OpenVPN\config\... Thanks. I can repost elsewhere if needed.
