dslreports logo
 
    All Forums Hot Topics Gallery
spc
uniqs
64

SoonerAl
MVM
join:2002-07-23
Norman, OK

3 edits

1 recommendation

SoonerAl to Nerdtalker

MVM

to Nerdtalker

Re: [OpenVPN] Does not launch, debian install

Set the server logging level to 4 to get additional messages that may provide clues. To do that change the server config file to read...

verb 4

Remember to restart the server after you make the change...

FWIW... Here is my server (running on an XP Pro box) log when I restarted the PC (for other reasons) a few minutes ago. This is with a logging level of 3 by the way...
quote:
Tue Jun 27 06:16:31 2006 OpenVPN 2.0.7 Win32-MinGW [SSL] [LZO] built on Apr 12 2006
Tue Jun 27 06:16:31 2006 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Tue Jun 27 06:16:31 2006 Diffie-Hellman initialized with 2048 bit key
Tue Jun 27 06:16:31 2006 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Tue Jun 27 06:16:31 2006 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jun 27 06:16:31 2006 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jun 27 06:16:31 2006 TLS-Auth MTU parms [ L:1574 D:166 EF:66 EB:0 ET:0 EL:0 ]
Tue Jun 27 06:16:31 2006 TAP-WIN32 device [OpenVPN] opened: \\.\Global\{7A020D9C-E920-435A-8BBF-4A388E812C9F}.tap
Tue Jun 27 06:16:31 2006 TAP-Win32 Driver Version 8.1
Tue Jun 27 06:16:31 2006 TAP-Win32 MTU=1500
Tue Jun 27 06:16:31 2006 Sleeping for 10 seconds...
Tue Jun 27 06:16:41 2006 NOTE: could not get adapter index for \DEVICE\TCPIP_{7A020D9C-E920-435A-8BBF-4A388E812C9F}, status=55 : The specified network resource or device is no longer available.
Tue Jun 27 06:16:41 2006 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Jun 27 06:16:41 2006 UDPv4 link local (bound): [undef]:1194
Tue Jun 27 06:16:41 2006 UDPv4 link remote: [undef]
Tue Jun 27 06:16:41 2006 MULTI: multi_init called, r=256 v=256
Tue Jun 27 06:16:41 2006 IFCONFIG POOL: base=10.8.0.31 size=5
Tue Jun 27 06:16:41 2006 IFCONFIG POOL LIST
Tue Jun 27 06:16:41 2006 Al,10.8.0.31
Tue Jun 27 06:16:41 2006 Initialization Sequence Completed

Now your server log should be similar at log level 3 or at least I think it should...

Nerdtalker
Working Hard, Or Hardly Working?
MVM
join:2003-02-18
San Jose, CA

Nerdtalker

MVM

Ok, I'll give that a try and post the results back. Thanks a ton for helping me out!
Nerdtalker

Nerdtalker to SoonerAl

MVM

to SoonerAl
Here's the end part of the log, when I run it:

Tue Jun 27 16:27:53 2006 us=21850 OpenVPN 2.0 i386-pc-linux [SSL] [LZO] [EPOLL] built on Apr  6 2006
Tue Jun 27 16:27:53 2006 us=22078 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Tue Jun 27 16:27:53 2006 us=67312 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Jun 27 16:27:53 2006 us=67495 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jun 27 16:27:53 2006 us=67750 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Jun 27 16:27:53 2006 us=67818 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jun 27 16:27:53 2006 us=67942 LZO compression initialized
Tue Jun 27 16:27:53 2006 us=68144 TCP/UDP: Socket bind failed on local address [undef]:1194: Address already in use
Tue Jun 27 16:27:53 2006 us=68207 Exiting

I'm under the impression that it's magically running now, because I see something running and listening on 1194... This is really weird that it didn't work before...

udp        0      0 0.0.0.0:1194            0.0.0.0:*

SoonerAl
MVM
join:2002-07-23
Norman, OK

SoonerAl

MVM

Good...

Can you connect from a client?

Nerdtalker
Working Hard, Or Hardly Working?
MVM
join:2003-02-18
San Jose, CA

Nerdtalker

MVM

Sadly, no. I just drove over to a Bruegger's Bagels to try it out, and it doesn't.

I'm sure I'm passing it through the router right, since I double checked it before I left. I'm using the OpenVPN GUI for windows, with the following config:
remote MYDNSNAME.com
dev tun
ifconfig 10.8.0.2 10.8.0.1
secret static.key

verb 4

This is the log, with OpenVPN continually showing "connecting"
Wed Jun 28 17:18:23 2006 us=119977 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Wed Jun 28 17:18:23 2006 us=121690 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jun 28 17:18:23 2006 us=121756 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jun 28 17:18:23 2006 us=121887 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jun 28 17:18:23 2006 us=151937 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jun 28 17:18:23 2006 us=396549 TAP-WIN32 device [NULL] opened: \\.\Global\{A7990892-A88A-4254-A1D5-9F9420BC117D}.tap
Wed Jun 28 17:18:23 2006 us=398662 TAP-Win32 Driver Version 8.1
Wed Jun 28 17:18:23 2006 us=400510 TAP-Win32 MTU=1500
Wed Jun 28 17:18:23 2006 us=402354 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.252 on interface {A7990892-A88A-4254-A1D5-9F9420BC117D} [DHCP-serv: 10.8.0.1, lease-time: 31536000]
Wed Jun 28 17:18:23 2006 us=453517 Successful ARP Flush on interface [4] {A7990892-A88A-4254-A1D5-9F9420BC117D}
Wed Jun 28 17:18:23 2006 us=502716 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:4 ET:0 EL:0 ]
Wed Jun 28 17:18:23 2006 us=502831 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.1 10.8.0.2,cipher BF-CBC,auth SHA1,keysize 128,secret'
Wed Jun 28 17:18:23 2006 us=502863 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.2 10.8.0.1,cipher BF-CBC,auth SHA1,keysize 128,secret'
Wed Jun 28 17:18:23 2006 us=517764 Local Options hash (VER=V4): 'd3880969'
Wed Jun 28 17:18:23 2006 us=517840 Expected Remote Options hash (VER=V4): 'c41bf3b8'
Wed Jun 28 17:18:23 2006 us=517926 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jun 28 17:18:23 2006 us=523980 UDPv4 link local (bound): [undef]:1194
Wed Jun 28 17:18:23 2006 us=524033 UDPv4 link remote: xxx.xxx.xxx.xxx:1194
Wed Jun 28 17:20:24 2006 us=939754 NOTE: failed to obtain options consistency info from peer -- this could occur if the remote peer is running a version of OpenVPN before 1.5-beta8 or if there is a network connectivity problem, and will not necessarily prevent OpenVPN from running (0 bytes received from peer, 0 bytes authenticated data channel traffic) -- you can disable the options consistency check with --disable-occ.
I truncated it a bit to fit, removed some extra garbage that I don't think is germane to the problem. It seems to just hang and do nothing.

I installed it and checked "hide TUN/TAP" interface in network connections, so I can't even see that. This is really strange.