From: Errol S. <esa...@go...> - 2009-01-02 17:43:55
|
Hello All, I am having a strange problem with OpenVPN and that is I can't get the server to start with my config file. I am including as much information as possible below with the hope that someone will point me in the right direction since I am not getting much information by googling. Let me explain what I have done so far: 1. Downloaded and installed the most recent kernel from kernel.org so I am now running CentOS 5.2 with Linux kernel version 2.6.28 2. Downloaded Openvpn 2.1_rc9 and rebuilt rpm so I am running OpenVPN 2.1_rc9 i686-redhat-linux-gnu [SSL] [LZO2] [EPOLL] built on Jan 1 2009. I also have LZO-2.02 installed. 3. I did a loopback server and client test and that worked fine. 4. ********************* myserver.conf ****************** port 1194 proto udp dev tun0 ca keys/house/ca.crt cert keys/house/myh-cert.crt key keys/house/myh-cert.key dh keys/house/dh2048.pem server 172.16.8.0 255.255.255.0 crl-verify keys/house/crl.pem ifconfig-pool-persist servers/myserver/logs/ipp.txt cipher BF-CBC user nobody group nobody status servers/myserver/logs/openvpn-status.log log-append servers/myserver/logs/openvpn.log verb 4 mute 20 max-clients 100 management 127.0.0.1 1195 keepalive 10 60 client-config-dir /etc/openvpn/servers/myserver/ccd comp-lzo persist-key persist-tun float ccd-exclusive push "route 172.16.8.1 255.255.255.0" push "dhcp-option DNS 172.16.8.1" push "redirect-gateway def1" ********** End myserver.conf *************** 5. ****************Logfile ***************** Fri Jan 2 11:29:40 2009 us=227524 Current Parameter Settings: Fri Jan 2 11:29:40 2009 us=227643 config = 'myserver.conf' Fri Jan 2 11:29:40 2009 us=227662 mode = 1 Fri Jan 2 11:29:40 2009 us=227678 persist_config = DISABLED Fri Jan 2 11:29:40 2009 us=227694 persist_mode = 1 Fri Jan 2 11:29:40 2009 us=227709 show_ciphers = DISABLED Fri Jan 2 11:29:40 2009 us=227723 show_digests = DISABLED Fri Jan 2 11:29:40 2009 us=227738 show_engines = DISABLED Fri Jan 2 11:29:40 2009 us=227752 genkey = DISABLED Fri Jan 2 11:29:40 2009 us=227767 key_pass_file = '[UNDEF]' Fri Jan 2 11:29:40 2009 us=227782 show_tls_ciphers = DISABLED Fri Jan 2 11:29:40 2009 us=227801 Connection profiles [default]: Fri Jan 2 11:29:40 2009 us=227818 proto = udp Fri Jan 2 11:29:40 2009 us=227834 local = '[UNDEF]' Fri Jan 2 11:29:40 2009 us=227849 local_port = 1194 Fri Jan 2 11:29:40 2009 us=227863 remote = '[UNDEF]' Fri Jan 2 11:29:40 2009 us=227878 remote_port = 1194 Fri Jan 2 11:29:40 2009 us=227893 remote_float = ENABLED Fri Jan 2 11:29:40 2009 us=227907 bind_defined = DISABLED Fri Jan 2 11:29:40 2009 us=227922 bind_local = ENABLED Fri Jan 2 11:29:40 2009 us=227936 NOTE: --mute triggered... Fri Jan 2 11:29:40 2009 us=227964 185 variation(s) on previous 20 message(s) suppressed by --mute Fri Jan 2 11:29:40 2009 us=227983 OpenVPN 2.1_rc9 i686-redhat-linux-gnu [SSL] [LZO2] [EPOLL] built on Jan 1 2009 Fri Jan 2 11:29:40 2009 us=228070 MANAGEMENT: TCP Socket listening on 127.0.0.1:1195 Fri Jan 2 11:29:40 2009 us=278122 Diffie-Hellman initialized with 2048 bit key Fri Jan 2 11:29:40 2009 us=278449 WARNING: file 'keys/house/etm-cert.key' is group or others accessible Fri Jan 2 11:29:40 2009 us=278933 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ] Fri Jan 2 11:29:40 2009 us=279423 TUN/TAP device tun0 opened Fri Jan 2 11:29:40 2009 us=279454 TUN/TAP TX queue length set to 100 Fri Jan 2 11:29:40 2009 us=279493 /sbin/ip link set dev tun0 up mtu 1500 Fri Jan 2 11:29:40 2009 us=280608 /sbin/ip addr add dev tun0 local 172.16.8.1 peer 172.16.8.2 Fri Jan 2 11:29:40 2009 us=281629 /sbin/ip route add 172.16.8.0/24 via 172.16.8.2 Fri Jan 2 11:29:40 2009 us=283134 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Fri Jan 2 11:29:40 2009 us=283922 GID set to nobody Fri Jan 2 11:29:40 2009 us=283995 UID set to nobody Fri Jan 2 11:29:40 2009 us=284037 Socket Buffers: R=[109568->131072] S=[109568->131072] Fri Jan 2 11:29:40 2009 us=284067 UDPv4 link local (bound): [undef]:1194 Fri Jan 2 11:29:40 2009 us=284088 UDPv4 link remote: [undef] Fri Jan 2 11:29:40 2009 us=284119 MULTI: multi_init called, r=256 v=256 Fri Jan 2 11:29:40 2009 us=284191 IFCONFIG POOL: base=172.16.8.4 size=62 Fri Jan 2 11:29:40 2009 us=284226 IFCONFIG POOL LIST Fri Jan 2 11:29:40 2009 us=284267 Initialization Sequence Completed ********************End log ************************* 6. In /var/log/messages I am seeing "kernel: tun0: Disabled Privacy Extensions" Thanks in Advance Errol |