Beiträge von jimmy_cr

Do a clean installation of "OMV" and "OMVExtras OpenVPN" nothing else. And you will see...

so where are these parameters taken from?

Its strange what he send yesterday - there is openvpn process runing, but parameters are really strange.

for example:

--config /etc/openvpn/openvpn.conf (cannot find /etc/openvpn/openvpn.conf anywhere in github sourcecode of plugin)

--client-config-dir /etc/openvpn/ccd (cannot find /etc/openvpn/ccd anywhere in github sourcecode of plugin)

--crl-verify /etc/openvpn/crl.pem (cannot find /etc/openvpn/crl.pem anywhere in github sourcecode of plugin)

These parameters are not set by OMV plugin imho...

Are you sure "Birdybird" you didn't try to install OpenVPN on you own and then installed as OMV plugin? Are you trying this plugin on clean installation of OMV?

Zitat von Birdybird

root@raspberrypi:~# ps aufx | grep openvpn

nobody 1378 0.0 0.0 4236 3612 ? Ss Nov20 0:00 \_ openvpn --config /etc/openvpn/openvpn.conf --client-config-dir /etc/openvpn/ccd --crl-verify /etc/openvpn/crl.pem

root 30060 0.0 0.0 6536 560 pts/0 S+ 09:15 0:00 \_ grep openvpn

root@raspberrypi:~#

Is it running ?

I cannot see it

Alles anzeigen

hmm.... Cant help you more. Something strange is happening, cant resolve. Sorry.

you ruined whole config file probably now. Set config through web, but do no enable OpenVPN. Save/Apply. Then go to console, run

openvpn --config /etc/openvpn/server.conf --log /var/log/openvpn.log

and post whats in /var/log/openvpn.log

omg.... do you read, what I am writing? You are doing things I am not asking you to do...

I thought that you are little bit experienced... Is openvpn running? Can you connect? post what is in /var/log/openvpn.log

looks good...

ah I see the problem. Try to run from console:

openvpn --config /etc/openvpn/server.conf --crl-verify /etc/openvpn/pki/crl.pem --log /var/log/openvpn.log

without MC, just type

cd /etc/openvpn
ls -l -R

post result...

if first output is from /etv/openvpn, we know where is problem... But I am not sure - "root@raspberrypi:~#" says its from your (or ROOTs) "Home" directory...

mine folders looks like (+ more files in other subfolders)

/etc/openvpn:
drwxr-xr-x 2 root root 4096 Feb 20  2019 client
drwxr-xr-x 8 root root 4096 Nov 12 07:15 pki
drwxr-xr-x 2 root root 4096 Feb 20  2019 server
-rw-rw-rw- 1 root root  681 Nov 21 09:12 server.conf
-rwxr-xr-x 1 root root 1468 Feb 20  2019 update-resolv-conf

/etc/openvpn/pki:
-rw------- 1 root root 1192 Oct 16 16:31 ca.crt
drwx------ 2 root root 4096 Nov  8 17:41 certs_by_serial
-rw------- 1 root root  837 Oct 31 21:37 crl.pem
-rw------- 1 root root  424 Oct 16 16:32 dh.pem
-rw------- 1 root root  554 Nov  8 17:41 index.txt
-rw------- 1 root root   20 Nov  8 17:41 index.txt.attr
-rw------- 1 root root   20 Nov  6 08:56 index.txt.attr.old
-rw------- 1 root root  483 Nov  6 08:56 index.txt.old
drwx------ 2 root root 4096 Nov  8 17:41 issued
-rw------- 1 root root 4651 Oct 16 16:31 openssl-easyrsa.cnf
drwx------ 2 root root 4096 Nov  8 17:41 private
drwx------ 5 root root 4096 Oct 16 16:31 renewed
drwx------ 2 root root 4096 Nov  8 17:41 reqs
drwx------ 5 root root 4096 Oct 16 16:31 revoked
-rw------- 1 root root 4585 Nov 21 09:13 safessl-easyrsa.cnf
-rw------- 1 root root   33 Nov  8 17:41 serial
-rw------- 1 root root   33 Nov  8 17:41 serial.old

it seems some files missing

Error opening configuration file: /etc/openvpn/openvpn.conf

Sat Nov 21 09:56:37 2020 OpenSSL: error:0909006C:PEM routines:get_name:no start line
Sat Nov 21 09:56:37 2020 Cannot load DH parameters from /etc/openvpn/pki/dh.pem

check whats in /etc/openvpn and /etc/openvpn/pki folders

ah I see, you are running raspberryPi...

my process list looks little bit different - I'm on Linux x64

/usr/sbin/openvpn --daemon ovpn-server --status /run/openvpn/server.status 10 --cd /etc/openvpn --config /etc/openvpn/server.conf --writepid /run/openvpn/server.pid
\_ /usr/sbin/openvpn --daemon ovpn-server --status /run/openvpn/server.status 10 --cd /etc/openvpn --config /etc/openvpn/server.conf --writepid /run/openvpn/server.pid

and everything works for me as expected - even with login/password

try to disable OpenVPN plugin and from console run manually

openvpn --config /etc/openvpn/openvpn.conf --client-config-dir /etc/openvpn/ccd --crl-verify /etc/openvpn/crl.pem

maybe we can see some error raised...

or maybe better with logging to file:

openvpn --config /etc/openvpn/openvpn.conf --client-config-dir /etc/openvpn/ccd --crl-verify /etc/openvpn/crl.pem --log /var/log/openvpn.log

then post whats inside /var/log/openvpn.log

First of all change config like this:

- disable "Use compression"

- disable "PAM authentication"

and after save / apply check if "openvpn" process is running - connect using SSH and run

ps aufx | grep openvpn

if YES, download client configuration and try to connect (without login/password for now)

(you already leaked your IP address)

- do you have open port on your router?

- but it seems there is some configuration mismatch on your OpenVPN server...

how about to create USER with PASSWORD in OMV5?. Please STOP, this thread is not about configuring OpenVPN.

Zitat von Birdybird

i have installed it but how to configure ?

I did not get username password.

How to connect via openvpn client on my android ?

So many "out-of-topic" questions for this forum/thread. Just use "google". No better answer.

- just one hint - use "TCP protocol" and "TUN device" if you want to use OVPN with Android device...

great job! as soon as there will be 2.5.0 for Debian, I'll be back Thanks

my previous post - please check if possible... NO MORE CHANGES FOR NOW (and version 2.4.7 of OpenVPN), I promise

Just one little change. Could you change client-config section (starting at line 368) in \usr\share\openmediavault\engined\rpc\openvpn.inc like this? (added line 'auth-nocache',). Thats all - better security for clients...

$configOptions = [
'client',
'remote ' . $publicAddress . ' ' . $port,
'proto ' . $protocol,
'dev ' . $device,
'remote-cert-tls server',
$compression,
$pam_authentication,
'persist-key',
$persist_tun,
'nobind',
'resolv-retry infinite',
'auth-nocache',
'verb 3',
'mute 10',
];