hallo bitte um hilfe, open vpn server stell keine verbindung mehr her, neu installiert mit pivpn keine besseung, fehlermeldung openvpn not listening, was kann icht tun ?? vielen dank.
openvpn
-
gromheisei -
5. August 2019 um 08:34 -
Erledigt
-
-
openvpn? Schau mal ob du hier fündig wirst!
-
Hast du geprüft ob der Service überhaupt richtig gestartet wurde ?
-
ja, mit pivpn -d alles auf ok. nur der letzte eintrag lautet ERRor openvpn is not listening, Danke
-
Was sagt sudo systemctl status openvpn.service
-
● openvpn.service - OpenVPN service
Loaded: loaded (/lib/systemd/system/openvpn.service; enabled; vendor preset:
Active: active (exited) since Fri 2019-08-02 10:41:28 CEST; 2 days ago
Main PID: 425 (code=exited, status=0/SUCCESS)
Tasks: 0 (limit: 2200)
Memory: 0B
CGroup: /system.slice/openvpn.service
Warning: Journal has been rotated since unit was started. Log output is incompl
lines 1-9/9 (END)
-
Dein Service läuft nicht. Ich kenne PiVPN nicht, aber du musst in den Logs mal nachsehen warum er nicht startet.
-
● openvpn.service - OpenVPN service
Loaded: loaded (/lib/systemd/system/openvpn.service; enabled; vendor preset:
Active: active (exited) since Fri 2019-08-02 10:41:28 CEST; 2 days ago
Main PID: 425 (code=exited, status=0/SUCCESS)
Wie sind die Ausgaben von:
?
-
ok pivpn installiert mit nur wenigen klicks einen openvpn server, http://www.pivpn.io/
funktionierte schon wunderbar
-
ug 5 09:15:21 raspberrypi3 ovpn-server[28566]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:15:21 raspberrypi3 ovpn-server[28566]: SSL_CTX_set_tmp_dh
Aug 5 09:15:21 raspberrypi3 ovpn-server[28566]: Exiting due to fatal error
Aug 5 09:15:27 raspberrypi3 ovpn-server[28572]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:15:27 raspberrypi3 ovpn-server[28572]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:15:27 raspberrypi3 ovpn-server[28572]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:15:27 raspberrypi3 ovpn-server[28572]: SSL_CTX_set_tmp_dh
Aug 5 09:15:27 raspberrypi3 ovpn-server[28572]: Exiting due to fatal error
Aug 5 09:15:32 raspberrypi3 ovpn-server[28577]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:15:32 raspberrypi3 ovpn-server[28577]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:15:32 raspberrypi3 ovpn-server[28577]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:15:32 raspberrypi3 ovpn-server[28577]: SSL_CTX_set_tmp_dh
Aug 5 09:15:32 raspberrypi3 ovpn-server[28577]: Exiting due to fatal error
Aug 5 09:15:37 raspberrypi3 ovpn-server[28587]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:15:37 raspberrypi3 ovpn-server[28587]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:15:37 raspberrypi3 ovpn-server[28587]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:15:37 raspberrypi3 ovpn-server[28587]: SSL_CTX_set_tmp_dh
Aug 5 09:15:37 raspberrypi3 ovpn-server[28587]: Exiting due to fatal error
Aug 5 09:15:43 raspberrypi3 ovpn-server[28593]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:15:43 raspberrypi3 ovpn-server[28593]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:15:43 raspberrypi3 ovpn-server[28593]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:15:43 raspberrypi3 ovpn-server[28593]: SSL_CTX_set_tmp_dh
Aug 5 09:15:43 raspberrypi3 ovpn-server[28593]: Exiting due to fatal error
Aug 5 09:15:48 raspberrypi3 ovpn-server[28600]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:15:48 raspberrypi3 ovpn-server[28600]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:15:48 raspberrypi3 ovpn-server[28600]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:15:48 raspberrypi3 ovpn-server[28600]: SSL_CTX_set_tmp_dh
Aug 5 09:15:48 raspberrypi3 ovpn-server[28600]: Exiting due to fatal error
Aug 5 09:15:53 raspberrypi3 ovpn-server[28605]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:15:53 raspberrypi3 ovpn-server[28605]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:15:53 raspberrypi3 ovpn-server[28605]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:15:53 raspberrypi3 ovpn-server[28605]: SSL_CTX_set_tmp_dh
Aug 5 09:15:53 raspberrypi3 ovpn-server[28605]: Exiting due to fatal error
Aug 5 09:15:59 raspberrypi3 ovpn-server[28611]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:15:59 raspberrypi3 ovpn-server[28611]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:15:59 raspberrypi3 ovpn-server[28611]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:15:59 raspberrypi3 ovpn-server[28611]: SSL_CTX_set_tmp_dh
Aug 5 09:15:59 raspberrypi3 ovpn-server[28611]: Exiting due to fatal error
Aug 5 09:16:04 raspberrypi3 ovpn-server[28617]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:16:04 raspberrypi3 ovpn-server[28617]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:16:04 raspberrypi3 ovpn-server[28617]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:16:04 raspberrypi3 ovpn-server[28617]: SSL_CTX_set_tmp_dh
Aug 5 09:16:04 raspberrypi3 ovpn-server[28617]: Exiting due to fatal error
Aug 5 09:16:09 raspberrypi3 ovpn-server[28623]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:16:09 raspberrypi3 ovpn-server[28623]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:16:09 raspberrypi3 ovpn-server[28623]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:16:09 raspberrypi3 ovpn-server[28623]: SSL_CTX_set_tmp_dh
Aug 5 09:16:09 raspberrypi3 ovpn-server[28623]: Exiting due to fatal error
Aug 5 09:16:15 raspberrypi3 ovpn-server[28629]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:16:15 raspberrypi3 ovpn-server[28629]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:16:15 raspberrypi3 ovpn-server[28629]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:16:15 raspberrypi3 ovpn-server[28629]: SSL_CTX_set_tmp_dh
Aug 5 09:16:15 raspberrypi3 ovpn-server[28629]: Exiting due to fatal error
Aug 5 09:16:20 raspberrypi3 ovpn-server[28635]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:16:20 raspberrypi3 ovpn-server[28635]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:16:20 raspberrypi3 ovpn-server[28635]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:16:20 raspberrypi3 ovpn-server[28635]: SSL_CTX_set_tmp_dh
Aug 5 09:16:20 raspberrypi3 ovpn-server[28635]: Exiting due to fatal error
Aug 5 09:16:25 raspberrypi3 ovpn-server[28642]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:16:25 raspberrypi3 ovpn-server[28642]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:16:25 raspberrypi3 ovpn-server[28642]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:16:25 raspberrypi3 ovpn-server[28642]: SSL_CTX_set_tmp_dh
Aug 5 09:16:25 raspberrypi3 ovpn-server[28642]: Exiting due to fatal error
Aug 5 09:16:31 raspberrypi3 ovpn-server[28646]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:16:31 raspberrypi3 ovpn-server[28646]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:16:31 raspberrypi3 ovpn-server[28646]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:16:31 raspberrypi3 ovpn-server[28646]: SSL_CTX_set_tmp_dh
Aug 5 09:16:31 raspberrypi3 ovpn-server[28646]: Exiting due to fatal error
Aug 5 09:16:36 raspberrypi3 ovpn-server[28650]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:16:36 raspberrypi3 ovpn-server[28650]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:16:36 raspberrypi3 ovpn-server[28650]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:16:36 raspberrypi3 ovpn-server[28650]: SSL_CTX_set_tmp_dh
Aug 5 09:16:36 raspberrypi3 ovpn-server[28650]: Exiting due to fatal error
Aug 5 09:16:42 raspberrypi3 ovpn-server[28655]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:16:42 raspberrypi3 ovpn-server[28655]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:16:42 raspberrypi3 ovpn-server[28655]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:16:42 raspberrypi3 ovpn-server[28655]: SSL_CTX_set_tmp_dh
Aug 5 09:16:42 raspberrypi3 ovpn-server[28655]: Exiting due to fatal error
Aug 5 09:16:47 raspberrypi3 ovpn-server[28660]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:16:47 raspberrypi3 ovpn-server[28660]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:16:47 raspberrypi3 ovpn-server[28660]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:16:47 raspberrypi3 ovpn-server[28660]: SSL_CTX_set_tmp_dh
Aug 5 09:16:47 raspberrypi3 ovpn-server[28660]: Exiting due to fatal error
Aug 5 09:16:53 raspberrypi3 ovpn-server[28665]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:16:53 raspberrypi3 ovpn-server[28665]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:16:53 raspberrypi3 ovpn-server[28665]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:16:53 raspberrypi3 ovpn-server[28665]: SSL_CTX_set_tmp_dh
Aug 5 09:16:53 raspberrypi3 ovpn-server[28665]: Exiting due to fatal error
Aug 5 09:16:58 raspberrypi3 ovpn-server[28671]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:16:58 raspberrypi3 ovpn-server[28671]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:16:58 raspberrypi3 ovpn-server[28671]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:16:58 raspberrypi3 ovpn-server[28671]: SSL_CTX_set_tmp_dh
Aug 5 09:16:58 raspberrypi3 ovpn-server[28671]: Exiting due to fatal error
Aug 5 09:17:04 raspberrypi3 ovpn-server[28690]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:17:04 raspberrypi3 ovpn-server[28690]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:17:04 raspberrypi3 ovpn-server[28690]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:17:04 raspberrypi3 ovpn-server[28690]: SSL_CTX_set_tmp_dh
Aug 5 09:17:04 raspberrypi3 ovpn-server[28690]: Exiting due to fatal error
Aug 5 09:17:09 raspberrypi3 ovpn-server[28696]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:17:09 raspberrypi3 ovpn-server[28696]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:17:09 raspberrypi3 ovpn-server[28696]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:17:09 raspberrypi3 ovpn-server[28696]: SSL_CTX_set_tmp_dh
Aug 5 09:17:09 raspberrypi3 ovpn-server[28696]: Exiting due to fatal error
Aug 5 09:17:14 raspberrypi3 ovpn-server[28715]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:17:14 raspberrypi3 ovpn-server[28715]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:17:14 raspberrypi3 ovpn-server[28715]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:17:14 raspberrypi3 ovpn-server[28715]: SSL_CTX_set_tmp_dh
Aug 5 09:17:14 raspberrypi3 ovpn-server[28715]: Exiting due to fatal error
Aug 5 09:17:20 raspberrypi3 ovpn-server[28722]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:17:20 raspberrypi3 ovpn-server[28722]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:17:20 raspberrypi3 ovpn-server[28722]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:17:20 raspberrypi3 ovpn-server[28722]: SSL_CTX_set_tmp_dh
Aug 5 09:17:20 raspberrypi3 ovpn-server[28722]: Exiting due to fatal error
Aug 5 09:17:25 raspberrypi3 ovpn-server[28727]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:17:25 raspberrypi3 ovpn-server[28727]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:17:25 raspberrypi3 ovpn-server[28727]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:17:25 raspberrypi3 ovpn-server[28727]: SSL_CTX_set_tmp_dh
Aug 5 09:17:25 raspberrypi3 ovpn-server[28727]: Exiting due to fatal error
Aug 5 09:17:30 raspberrypi3 ovpn-server[28746]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:17:30 raspberrypi3 ovpn-server[28746]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:17:30 raspberrypi3 ovpn-server[28746]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:17:30 raspberrypi3 ovpn-server[28746]: SSL_CTX_set_tmp_dh
Aug 5 09:17:30 raspberrypi3 ovpn-server[28746]: Exiting due to fatal error
Aug 5 09:17:36 raspberrypi3 ovpn-server[28764]: OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Aug 5 09:17:36 raspberrypi3 ovpn-server[28764]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.10
Aug 5 09:17:36 raspberrypi3 ovpn-server[28764]: OpenSSL: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small
Aug 5 09:17:36 raspberrypi3 ovpn-server[28764]: SSL_CTX_set_tmp_dh
Aug 5 09:17:36 raspberrypi3 ovpn-server[28764]: Exiting due to fatal error
-
pi@raspberrypi3:~ $ sudo netstat -tulpena | grep -i vpn
pi@raspberrypi3:~ $ ps aux | grep -i [o]penvpn
pi@raspberrypi3:~ $
-
pi@raspberrypi3:~ $ ps aux | grep -i [o]penvpn
Hast Du zwischen den Ausgaben von "sudo systemctl status openvpn.service" und "ps aux | grep -i [o]penvpn", etwas geändert bzw. gemacht?
EDIT:
Siehe auch diesen Thread: https://www.raspberrypi.org/forums/viewtop…513412#p1513412
-
nein, gar nix
-
...
funktionierte schon wunderbar
Mit welchen Versionen (OS, openvpn, openssl, server-config) hat der openvpn-Server auf deinem PI schon mal funktioniert?
-
weis es nicht nicht mehr ob das die neueste war oder die kurz vorher OS, schade.
-
weis es nicht nicht mehr ob das die neueste war oder die kurz vorher OS, schade.
BTW: Ich habe die Version 2.4.7 jetzt aus dem source code kompiliert und diese Version funktioniert bei mir _nicht_ mit der server-config, die mit der Version 2.4.6, richtig funktioniert. Ich weiß aber noch nicht, was in der server-config (oder evtl. mit den keys) geändert werden muss/soll.
EDIT:
Jetzt funktioniert auch die Version 2.4.7. Ich musste in der server.conf lediglich die Zeile:
in
ändern.
EDIT 2:
... und die service-unit für openvpn@server musste ich noch anpassen:
Spoiler anzeigen
Code
Alles anzeigen:~ $ systemctl cat openvpn@server # /lib/systemd/system/openvpn@.service [Unit] Description=OpenVPN connection to %i PartOf=openvpn.service ReloadPropagatedFrom=openvpn.service Before=systemd-user-sessions.service After=syslog.target network-online.target Wants=network-online.target Documentation=man:openvpn(8) Documentation=https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage Documentation=https://community.openvpn.net/openvpn/wiki/HOWTO [Service] PrivateTmp=true KillMode=process Type=notify ExecStart=/usr/sbin/openvpn --daemon ovpn-%i --status /run/openvpn/%i.status 10 --cd /etc/openvpn --config /etc/openvpn/%i PIDFile=/run/openvpn/%i.pid ExecReload=/bin/kill -HUP $MAINPID WorkingDirectory=/etc/openvpn ProtectSystem=yes ProtectHome=true CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP LimitNPROC=10 DeviceAllow=/dev/null rw DeviceAllow=/dev/net/tun rw RestartSec=5s Restart=on-failure [Install] WantedBy=multi-user.target
Code:~ $ openvpn --version OpenVPN 2.4.7 armv7l-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Aug 5 2019 library versions: OpenSSL 1.1.0k 28 May 2019 Originally developed by James Yonan Copyright (C) 2002-2018 OpenVPN Inc <sales@openvpn.net> Compile time defines: enable_async_push=no enable_comp_stub=no enable_crypto=yes enable_crypto_ofb_cfb=yes enable_debug=yes enable_def_auth=yes enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=yes enable_fragment=yes enable_iproute2=no enable_libtool_lock=yes enable_lz4=yes enable_lzo=no enable_management=yes enable_multihome=yes enable_pam_dlopen=no enable_pedantic=no enable_pf=yes enable_pkcs11=no enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_small=no enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=yes enable_werror=no enable_win32_dll=yes enable_x509_alt_username=no with_aix_soname=aix with_crypto_library=openssl with_gnu_ld=yes with_mem_check=no with_sysroot=no
Code:~ $ systemctl status openvpn ● openvpn.service - OpenVPN service Loaded: loaded (/lib/systemd/system/openvpn.service; enabled; vendor preset: enabled) Active: active (exited) since Mon 2019-08-05 11:35:38 CEST; 4min 17s ago Main PID: 282 (code=exited, status=0/SUCCESS) Tasks: 0 (limit: 4915) CGroup: /system.slice/openvpn.service
Code:~ $ systemctl status openvpn@server ● openvpn@aerver.service - OpenVPN connection to aerver Loaded: loaded (/lib/systemd/system/openvpn@.service; disabled; vendor preset: enabled) Active: inactive (dead) Docs: man:openvpn(8) https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage https://community.openvpn.net/openvpn/wiki/HOWTO
Code
Alles anzeigen:~ $ cat /etc/openvpn/server.conf port xxxxx nice -14 opt-verify sndbuf 0 rcvbuf 0 tls-timeout 5 remote-cert-tls client reneg-bytes 67108864 reneg-sec 1754 proto udp connect-freq 3 15 dev tun mode server tls-server ca /etc/openvpn/easy-rsa2/keys/ca.crt cert /etc/openvpn/easy-rsa2/keys/server.crt key /etc/openvpn/easy-rsa2/keys/server.key # This file should be kept secret dh none server 10.8.0.0 255.255.255.0 ifconfig-pool-persist /etc/openvpn/ipp.txt 0 client-config-dir /etc/openvpn/ccd ccd-exclusive route 192.168.178.0 255.255.255.0 keepalive 30 240 ping-timer-rem auth RSA-SHA512 auth-nocache tls-exit tls-version-min 1.2 or-highest tls-cipher TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384 ecdh-curve secp384r1 tls-crypt /etc/openvpn/easy-rsa2/keys/ta.key ncp-ciphers AES-256-GCM:AES-256-CBC max-clients 3 user openvpn group openvpn persist-key persist-tun replay-persist /etc/openvpn/replay_persist verb 0 mute-replay-warnings
Code
Alles anzeigen:~ $ ldd $(which openvpn) linux-vdso.so.1 (0x7ef3d000) libnsl.so.1 => /lib/arm-linux-gnueabihf/libnsl.so.1 (0x76ed8000) libresolv.so.2 => /lib/arm-linux-gnueabihf/libresolv.so.2 (0x76eb3000) libcrypto.so.1.1 => /usr/lib/arm-linux-gnueabihf/libcrypto.so.1.1 (0x76cdd000) libssl.so.1.1 => /usr/lib/arm-linux-gnueabihf/libssl.so.1.1 (0x76c7c000) libsystemd.so.0 => /lib/arm-linux-gnueabihf/libsystemd.so.0 (0x76c01000) libdl.so.2 => /lib/arm-linux-gnueabihf/libdl.so.2 (0x76bee000) libc.so.6 => /lib/arm-linux-gnueabihf/libc.so.6 (0x76aaf000) /lib/ld-linux-armhf.so.3 (0x76efc000) libpthread.so.0 => /lib/arm-linux-gnueabihf/libpthread.so.0 (0x76a86000) libselinux.so.1 => /lib/arm-linux-gnueabihf/libselinux.so.1 (0x76a53000) librt.so.1 => /lib/arm-linux-gnueabihf/librt.so.1 (0x76a3c000) liblzma.so.5 => /lib/arm-linux-gnueabihf/liblzma.so.5 (0x76a0b000) liblz4.so.1 => /usr/lib/arm-linux-gnueabihf/liblz4.so.1 (0x769ea000) libgcrypt.so.20 => /lib/arm-linux-gnueabihf/libgcrypt.so.20 (0x76919000) libgcc_s.so.1 => /lib/arm-linux-gnueabihf/libgcc_s.so.1 (0x768ec000) libpcre.so.3 => /lib/arm-linux-gnueabihf/libpcre.so.3 (0x76873000) libgpg-error.so.0 => /lib/arm-linux-gnueabihf/libgpg-error.so.0 (0x76853000)
EDIT 3:
BTW: Die compile-time-Optionen, die service-unit für openvpn@server und die server.conf, müssen nicht so sein wie bei mir.
-
der code: client-config-dir ccd ist in meiner server gar nicht vorhanden ! hmm.
danke
-
der code: client-config-dir ccd ist in meiner server gar nicht vorhanden
Ist evtl. ja auch nicht erforderlich (abhängig von der Konfiguration). Es hat ja bei dir, auch schon mal ohne diese Option funktioniert.
Poste mal den "original"-Inhalt der service-units:
-
pi@raspberrypi3:~ $ systemctl cat openvpn
# /lib/systemd/system/openvpn.service
# This service is actually a systemd target,
# but we are using a service since targets cannot be reloaded.
[Unit]
Description=OpenVPN service
After=network.target
[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/bin/true
ExecReload=/bin/true
WorkingDirectory=/etc/openvpn
[Install]
WantedBy=multi-user.target
lines 1-18
-
pi@raspberrypi3:~ $ systemctl cat openvpn@server
# /lib/systemd/system/openvpn@.service
[Unit]
Description=OpenVPN connection to %i
PartOf=openvpn.service
ReloadPropagatedFrom=openvpn.service
Before=systemd-user-sessions.service
After=network-online.target
Wants=network-online.target
Documentation=man:openvpn(8)
Documentation=https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
Documentation=https://community.openvpn.net/openvpn/wiki/HOWTO
[Service]
Type=notify
PrivateTmp=true
WorkingDirectory=/etc/openvpn
ExecStart=/usr/sbin/openvpn --daemon ovpn-%i --status /run/openvpn/%i.status 10
PIDFile=/run/openvpn/%i.pid
lines 1-18
# /lib/systemd/system/openvpn@.service
[Unit]
Description=OpenVPN connection to %i
PartOf=openvpn.service
ReloadPropagatedFrom=openvpn.service
Before=systemd-user-sessions.service
After=network-online.target
Wants=network-online.target
Documentation=man:openvpn(8)
Documentation=https://community.openvpn.net/openvpn/wiki/Openvpn24ManPa
Documentation=https://community.openvpn.net/openvpn/wiki/HOWTO
[Service]
Type=notify
PrivateTmp=true
WorkingDirectory=/etc/openvpn
ExecStart=/usr/sbin/openvpn --daemon ovpn-%i --status /run/openvpn/%i.s
PIDFile=/run/openvpn/%i.pid
lines 1-18
-
lines 1-18
Dann poste besser die Ausgabe von:
Hast Du an dieser Datei evtl. schon etwas geändert? Wenn nicht, dann ein backup machen:
-
Jetzt mitmachen!
Du hast noch kein Benutzerkonto auf unserer Seite? Registriere dich kostenlos und nimm an unserer Community teil!