Problem with setting up a certificate OMV-extras OPENVPN

ZJohnAsZ · 24. März 2015

Hi,
I installed the plugin without experiencing any problem, but once I try to create a certificate I get an error message.
I have 2 boxes available: in the 1st on I select the user and then I can name it.
I then click to accept, get an error message, but still, the certificate appears in the list.
When I try to delete that certificate, I get another error, but it doesn't disappear from the list. It only does when I uninstall OPENVPN.

I tried uninstalling and reinstalling OPENVPN, but get the same errors.

Anyone experienced it? My OMV setup is a fresh install...

I am not at home now, but I will post the exact message that I get when I get there later.

Thank You!

ZJohnAsZ · 25. März 2015

Error when I try to add or delete a certificate:

Code

Error
 #4000:
exception 'OMVException' with message 'Failed to execute command 
'omv-mkconf openvpn add a0172869-dd7c-4e2f-b30c-cddd24b20253 
2>&1': /usr/share/openmediavault/mkconf/openvpn: line 407: cd: 
/etc/openvpn/easy-rsa/2.0/: No such file or directory' in 
/usr/share/openmediavault/engined/rpc/openvpn.inc:343
Stack trace:
#0 [internal function]: OMVRpcServiceOpenVpn->set(Array, Array)
#1 /usr/share/php/openmediavault/rpcservice.inc(125): 
call_user_func_array(Array, Array)
#2 /usr/share/php/openmediavault/rpc.inc(79): 
OMVRpcServiceAbstract->callMethod('set', Array, Array)
#3 /usr/sbin/omv-engined(500): OMVRpc::exec('OpenVpn', 'set', Array, 
Array, 1)
#4 {main}

Alles anzeigen

subzero79 · 25. März 2015

I think you're confused about the openvpn plugin, the server PKI is managed internally you have to place CA, certs, keys and dh with ssh or scp.
The server generates an initial PKI you can use, for fast start. If you want your own is like I mentioned before.
The plugin doesn't use the omv certificate generator and manager.

ZJohnAsZ · 25. März 2015

I'm talking about the certificate tab in the plugin.

subzero79 · 25. März 2015

Ah ok. The client certificates. I am gonna take a look there. Last time I used it was working. What version of omv are you using?

subzero79 · 25. März 2015

This was working a few versions ago. I guesss it has to do with the new features introduced in OMV.

You can report it here please https://github.com/OpenMediaVa…s/openmediavault-openvpn/

ZJohnAsZ · 26. März 2015

So, it should be corrected soon? It means everyone would experience it ?
I guess I will just wait and setup a VPN on my ddwrt router instead.

nicosea · 16. Februar 2016

I got the same problems on my OMV on raspberry pi, but I found a solution for now, which is working very well, until the openvpn (and the openvpnAS) will work gain in a decent way.

First of all, remove openvpn from OMV via web gui.

After that, go to the below link and follow the very easy setup explanation, based on a script:
http://peterjolson.com/super-e…config-on-openmediavault/

The script has been updated by that time, so the procedure is slightly different now (and even easier), because at the end you will get a file client.ovpn on the root (or [filename_you_choose].ovpn), which can be save and uploaded on you openvpn client (I am using it also on my phone and it is working very well).

Please keep in mind that in your router you will need to forward the VPN UPD port to your OPV ip address. Please also consider that the script will take a very long time to generate the keys, it is normal.

To save the client.ovpn, use the command: "scp client.ovpn your_username@remotehost.edu:/some/remote/directory"

Do not install or activate openvpn from openmediavaul web gui, otherwise OMV will overwrite the openvpn settings and it might make a mess.

I hope this will help, as it helped me!

nicosea · 24. Februar 2016

I noticed the following errors in the system log everytime I used the vpn connection:

ovpn-server[nnnn]: read UDPv4 [EMSGSIZE Path-MTU=1452]: Message too long (code=90)

This message shows up when OpenVPN detects that packets get fragment somewhere between client and server (I think the raspberry Lan is not fast enough for a value MTU=1452).

I solved the problem by adding the following line to /etc/openvpn/server.conf:

mssfix 1400

Jetzt mitmachen!