Beiträge von coucoun

I get a ZIP file (openvpn-pi.zip) containing:
pi-ca.crt
pi-client.conf
pi-client.crt
pi-client.key
pi-client.ovpn

Then, I unzip it on my PC and:
- On Windows 7, I put files in "C:\Program Files\OpenVPN\config"
- On Android 5.1, I put files on it and then import "pi-client.ovpn" (import is successfully done)

Looking at the content of pi-ca.crt, content seems not to be relevant:
E = mail@host.domain
2.5.4.41 = changeme
CN = changeme
OU = changeme
O = Fort-Funston
L = SanFrancisco
S = CA
C = US

This is default information of /etc/open/easy-rsa/2.0/vars

For information, I saw that certificates (server (and client)) manually generated were different to the certificate of the pi user created from the web gu. Indeed, some of the above information like 'changeme' info. were displayed for pi user, so it does not match with the server certificate.

Is the certificate generation from the web gui reliable?

Ok, done => http://bugtracker.openmediavault.org/view.php?id=1331

Thanks for port forwarding information.

I tried to generate them by myselft because initialy I tried with the web gui but it did not work. I have uninstalled the plugin, then "apt-get purge openvpn" and then remove openvpn folder to install it again.

I ticked 'openvpn' in group list of pi user, then certifcate was generaed from web gui and downloaded to put it in 'config' folder of OpenVPN client.

But, still got issues:
Tue Jan 27 17:39:17 2015 192.168.1.14:61529 TLS Error: TLS handshake failed
Tue Jan 27 17:39:19 2015 192.168.1.14:61530 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jan 27 17:39:19 2015 192.168.1.14:61530 TLS Error: TLS handshake failed
Tue Jan 27 17:39:19 2015 192.168.1.14:63750 Re-using SSL/TLS context
Tue Jan 27 17:39:19 2015 192.168.1.14:63750 LZO compression initialized
Tue Jan 27 17:39:19 2015 192.168.1.14:63750 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Jan 27 17:39:19 2015 192.168.1.14:63750 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jan 27 17:39:19 2015 192.168.1.14:63750 Local Options hash (VER=V4): '530fdded'
Tue Jan 27 17:39:19 2015 192.168.1.14:63750 Expected Remote Options hash (VER=V4): '41690919'

For PolarSSL message, I think it is not possible to choose. I tried also with 'OpenVPN for Android' but it did not work also.

Any idea?

Maybe you should also add the ability to enter "Trusted Domain(s)" in OwnCloud plugin.

Hi,

I installed OpenVPN plugin (via "OMV-Extras.org", I ticked "VPN", and then installed"openmediavault-openvpn 1.1" from Plugins).

Then, I create certificates with the following commands via SSH :

1/ Edit vars (export KEY_DIR, export KEY_COUTRY, etc.)

nano /etc/openvpn/easy-rsa/2.0/vars

2/ Open the folder

cd /etc/openvpn/easy-rsa/2.0/

3/ Use vars

source ./vars

4/ Delete existing certificates

./clean-all

5/ Generate certificate authority and certificate key (client):

./build-ca

6/ Generate certificate authority and certificate key (server):

./build-key-server myserver.no-ip.org

7/ Generate BUILD DIFFIE-HELLMAN PARAMETERS (necessary for the server end of a SSL/TLS connection)

./build-dh

8/Generate a key to use with tls-auth which adds an additional HMAC signature to all SSL/TLS handshake packets

openvpn --genkey --secret /etc/openvpn/keys/ta.key

9/ Change permisssions to see certificates and keys from eXtplorer

chmod 755 /etc/openvpn/keys/

Then, I forwarded 1194 UDP port on my router. Should I do the same with the firewall of OMV? If yes, how to populate 'source', 'destination', etc. fields?

For information, here below the content of "/etc/openvpn/server.conf" (with comments removed):

port 1194


proto udp


dev tun


ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key # This file should be kept secret


dh /etc/openvpn/keys/dh2048.pem


server 10.8.0.0 255.255.255.0


ifconfig-pool-persist ipp.txt


;push "route 192.168.1.0 255.255.255.0"


push "redirect-gateway def1 bypass-dhcp"


;client-to-client


keepalive 10 120


comp-lzo


;plugin /usr/lib/openvpn/openvpn-auth-pam.so login


user nobody
group nogroup


persist-key
persist-tun


status openvpn-status.log


log /var/log/openvpn.log


verb 2


mute 10


crl-verify /etc/openvpn/keys/crl.pem

When trying to connect using "OpenVPN GUI v5" on Windows, the following log is displayed:

Thu May 14 14:08:02 2015 OpenVPN 2.3.6 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Mar 4 2015
Thu May 14 14:08:02 2015 library versions: OpenSSL 1.0.1l 15 Jan 2015, LZO 2.08
Thu May 14 14:08:02 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu May 14 14:08:02 2015 Need hold release from management interface, waiting...
Thu May 14 14:08:02 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu May 14 14:08:03 2015 MANAGEMENT: CMD 'state on'
Thu May 14 14:08:03 2015 MANAGEMENT: CMD 'log all on'
Thu May 14 14:08:03 2015 MANAGEMENT: CMD 'hold off'
Thu May 14 14:08:03 2015 MANAGEMENT: CMD 'hold release'
Thu May 14 14:08:03 2015 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu May 14 14:08:03 2015 MANAGEMENT: >STATE:1431605283,RESOLVE,,,
Thu May 14 14:08:03 2015 UDPv4 link local: [undef]
Thu May 14 14:08:03 2015 UDPv4 link remote: [AF_INET]XX.212.126.152:1194
Thu May 14 14:08:03 2015 MANAGEMENT: >STATE:1431605283,WAIT,,,
Thu May 14 14:08:03 2015 MANAGEMENT: >STATE:1431605283,AUTH,,,
Thu May 14 14:08:03 2015 TLS: Initial packet from [AF_INET]XX.212.126.152:1194, sid=25c45403 2b00edda

On OMV side, I had the following log:

Tue Jul 7 07:56:03 2015 192.168.1.1:58942 Re-using SSL/TLS context
Tue Jul 7 07:56:03 2015 192.168.1.1:58942 LZO compression initialized
Tue Jul 7 07:56:03 2015 192.168.1.1:58942 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Jul 7 07:56:03 2015 192.168.1.1:58942 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jul 7 07:56:03 2015 192.168.1.1:58942 Local Options hash (VER=V4): '530fdded'
Tue Jul 7 07:56:03 2015 192.168.1.1:58942 Expected Remote Options hash (VER=V4): '41690919'
Tue Jul 7 07:56:24 2015 192.168.1.1:58922 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 7 07:56:24 2015 192.168.1.1:58922 TLS Error: TLS handshake failed
Tue Jul 7 07:56:27 2015 80.12.39.138:36654 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 7 07:56:27 2015 80.12.39.138:36654 TLS Error: TLS handshake failed
Tue Jul 7 07:57:03 2015 192.168.1.1:58942 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 7 07:57:03 2015 192.168.1.1:58942 TLS Error: TLS handshake failed
Tue Jul 7 07:57:05 2015 192.168.1.1:62717 Re-using SSL/TLS context
Tue Jul 7 07:57:05 2015 192.168.1.1:62717 LZO compression initialized
Tue Jul 7 07:57:05 2015 192.168.1.1:62717 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Jul 7 07:57:05 2015 192.168.1.1:62717 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jul 7 07:57:05 2015 192.168.1.1:62717 Local Options hash (VER=V4): '530fdded'
Tue Jul 7 07:57:05 2015 192.168.1.1:62717 Expected Remote Options hash (VER=V4): '41690919'

Besides, On Android 5.1 when using OpenVPN Connect, the following message is displayed:

OpenVPN server certificate verification failed : PolarSSL: SSL read error : X509 - Certificate verification failed, e.g. CRL, CA or signature check failed.

I have tried several time to find information but still no solved. Any reason why the connection does not work?

Regards

Go idea for the boot script to expand the partition to fill the rest of the MicroSD card.

After doing the following command via SSH:

sudo su -
apt-get install parted


parted /dev/mmcblk0


unit s
print


mkpart primary 7290880 62333951
print


quit
mkfs.ext4 /dev/mmcblk0p4
e2label /dev/mmcblk0p4 data

Then, I was able to mount the partition and create a Shared folder

Thanks for your help

Hi,

Thanks for your answer.

I would prefer to say that is the problem when this cannot be done directly via the GUI directly for lambda users. Indeeed, this should be more user-friendly instead of using Gparted (even if it is a very good tool).
I have only tried to find information, and I guess you would agree that it is better than asking without trying something by ourself.

Anyway, I tried to mount the partition /dev/mmcblk0p4 via the web interface before using

nano /etc/fstab

However, the partition was not mounted. A message was displayed (sorry, I did not keep a record of it).

Maybe I can do another fresh install to get this message again.

Hello,

Thanks for your answers.

Actually, I succeeded to create a partition using this method:
http://elinux.org/RPi_Easy_SD_…partitions_.28Optional.29

In File Systems, following information are displayed:

However, the volume cannot be selected when trying to add a Shared folder (only 'rrdcache' is available in the list).

Any reason why this volume cannot be selected?

PS: I also use information of the link below for comparison to what I see on mine
http://en.jose-crispim.pt/arti…penmediavault.html#p2_3_3

Regards,

Hello,

I downloaded and installed "omv_1.17_rpi_rpi2.img" on a Raspberry Pi 2 with Owncloud plugin. Installations were ok.

However, I saw that only a part of the size of the micro SD card is used. So, I would like to use the free space to store Owncloud data, etc.

On "http://sourceforge.net/projects/openmediavault/files/" page, it is mentionned that we "Can create another partition on SD card or use usb hard drive for data storage".
I tried to find information on the forum but nothing on it (unless I am mistaken)

I have tried the raspi-config to expand the partition 2 but it did not work because "root partition is not the last one" (if I remenber well. Maybe due to the SWAP partition?).
Then, I tried to manually rezise partitions (using the below link) but it did not work:
http://elinux.org/RPi_Resize_F…e_SD_card_on_Raspberry_Pi

Is there a simple way to create this new partition and make it accessible for Owncloud? Or should I tried the following method?
http://elinux.org/RPi_Easy_SD_…partitions_.28Optional.29

Regards