How to propably start OVPN(-Client) on latest Raspberry Buster

[Kreiszahler]

Hey there,

I've been digging this Forum for some time - as other sources, but just can't fix my problem, nor really found THE (working) best pratice solution for my issue.

Lets assume:

Code: Select all

Clean install latest Raspian Buster
apt update & apt upgrade (and if needed rpi-update).
sudo apt-get install openvpn openssl openresolv
sudo cp CG_XX.conf /etc/openvpn/
sudo cp ca.crt /etc/openvpn/
sudo cp client.crt /etc/openvpn/
sudo cp client.key /etc/openvpn/
added user.txt (creds) to CG_XX
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf
sudo nano /etc/default/openvpn = AUTOSTART="CG_XX"  
sudo update-rc.d openvpn enable
sudo service openvpn start

Starts, works, fails after some time.
No double use, no mss etc... Any idea?

[TinCanTech]

systemctl start openvpn-client@{$config_name}.service

viewtopic.php?f=30&t=22603#p68963

[Kreiszahler]

Hey!

Thanks. How can I revert:

Code: Select all

sudo update-rc.d openvpn enable
sudo service openvpn start

or don't I have to?

I'll give

Code: Select all

sudo update-rc.d openvpn disable

I got the feeling, there are services fighting for the auth, which leads me to disconnects:

After booting:

Code: Select all

***@*********:~/dnsleaktest $ ./dnsleaktest.py
Your IP:
89.187.***.*** [Austria, AS60068 CDN77]
You use 1 DNS servers:
89.187.***.*** [Austria, AS60068 CDN77]
Conclusion:
DNS is not leaking.

A short itme later:
***@**********:~/dnsleaktest $ ./dnsleaktest.py

Code: Select all

Your IP:
**9.*5*.2**.*4 [Germany, AS8881 Versatel]
You use 5 DNS servers:
**2.1*5.**9.*** [Germany, AS8881 Versatel]
**2.1*5.**9.**4 [Germany, AS8881 Versatel]
**2.1*5.**9.**5 [Germany, AS8881 Versatel]
**2.1*5.**9.**7 [Germany, AS8881 Versatel]
**2.1*5.**9.**9 [Germany, AS8881 Versatel]
Conclusion:
DNS is not leaking.

sudo systemctl restart openvpn.service

Code: Select all

***@*********:~/dnsleaktest $ ./dnsleaktest.py
Your IP:
89.187.***.*** [Austria, AS60068 CDN77]
You use 1 DNS servers:
89.187.***.*** [Austria, AS60068 CDN77]
Conclusion:
DNS is not leaking.

A short itme later:

Code: Select all

***@**********:~/dnsleaktest $ ./dnsleaktest.py
Your IP:
**9.*5*.2**.*4 [Germany, AS8881 Versatel]
You use 5 DNS servers:
**2.1*5.**9.**2 [Germany, AS8881 Versatel]
**2.1*5.**9.**4 [Germany, AS8881 Versatel]
**2.1*5.**9.**5 [Germany, AS8881 Versatel]
**2.1*5.**9.**6 [Germany, AS8881 Versatel]
**2.1*5.**9.**0 [Germany, AS8881 Versatel]
Conclusion:
DNS is not leaking.

[Kreiszahler]

Code: Select all

pi@BLACKhole:~ $ sudo systemctl start openvpn-client@CG_AT.service
Job for openvpn-client@CG_AT.service failed because the control process exited with error code.
See "systemctl status openvpn-client@CG_AT.service" and "journalctl -xe" for details.

No matter if sudo update-rc.d openvpn enable or disable. :/