Arch Linux

flat5security

Member

Registered: 2011-08-21

Posts: 1

openvpn fails to start.

Hi,

I have recently tried to set up an OpenVPN install following the steps of ArchWiki to the letter.

launching "/etc/rc.d/openvpn start" just makes it fail every time.

A quick look at /var/log/messages.log shows:

Aug 21 08:42:07 alarm openvpn[1716]: OpenVPN 2.2.0 armv5tel-unknown-linux-gnueabi [SSL] [LZO2] [EPOLL] [eurephia] built on May 31 2011
Aug 21 08:42:07 alarm openvpn[1716]: NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Aug 21 08:42:07 alarm openvpn[1716]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Aug 21 08:42:07 alarm openvpn[1716]: Diffie-Hellman initialized with 1024 bit key
Aug 21 08:42:07 alarm openvpn[1716]: TLS-Auth MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Aug 21 08:42:07 alarm openvpn[1716]: Socket Buffers: R=[112640->131072] S=[112640->131072]
Aug 21 08:42:07 alarm openvpn[1716]: TUN/TAP device tap0 opened
Aug 21 08:42:07 alarm openvpn[1716]: TUN/TAP TX queue length set to 100
Aug 21 08:42:07 alarm openvpn[1716]: /sbin/ifconfig tap0 10.8.0.1 netmask 255.255.255.0 mtu 1500 broadcast 10.8.0.255
Aug 21 08:42:07 alarm openvpn[1716]: Exiting

I have the following config file:

port 1194
proto udp
dev tap

ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/alarm.crt
key /etc/openvpn/easy-rsa/keys/alarm.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem

server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
#user nobody
#group users
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 3

log-append /var/log/openvpn
status /tmp/vpn.status 10

push "dhcp-option DNS 203.186.94.22"
push "redirect-gateway def1"

Any help would be much appreciated, I have been stuck on this problem for days.

Best wishes,

65kid

Member

From: Germany

Registered: 2011-01-26

Posts: 663

Re: openvpn fails to start.

Have you compiled OpenVPN yourself? Because the latest version in the repos is 2.2.1 and uses iproute2 instead of ifconfig (which is part of net-tools, which is deprecated). It seems to me like it fails because you don't have net-tools installed and it can't find ifconfig.

Either use the latest version of the repo, install net-tools or compile with --enable-iproute2 .