Can't start OpenVPN, missing file

Altiris · 08-23-2013, 10:36 AM

I followed this guide, (https://www.digitalocean.com/communi...er-on-centos-6) everything went successful in the guide however when its time to connect to the VPN server I get an error that the server refused the connection immediatley. I tried disabling the firewall and I have the 1194 TCP port enabled.

unSpawn · 08-25-2013, 05:29 AM

Probably the entries from whatever log file the OpenVPN daemon logs to?

Altiris · 08-25-2013, 11:21 AM

Quote:

Originally Posted by unSpawn

Probably the entries from whatever log file the OpenVPN daemon logs to?

Yeah I found it, its in /var/log/messages

Code:

Aug 25 12:06:07 necc-data openvpn[3779]: Options error: --dh fails with 'dh1024.pem': No such file or directory
Aug 25 12:06:07 necc-data openvpn[3779]: Options error: Please correct these errors.
Aug 25 12:06:07 necc-data openvpn[3779]: Use --help for more information.

TB0ne · 08-25-2013, 11:36 AM

Quote:

Originally Posted by Altiris

Yeah I found it, its in /var/log/messages

Code:

Aug 25 12:06:07 necc-data openvpn[3779]: Options error: --dh fails with 'dh1024.pem': No such file or directory
Aug 25 12:06:07 necc-data openvpn[3779]: Options error: Please correct these errors.
Aug 25 12:06:07 necc-data openvpn[3779]: Use --help for more information.

Great...so did you create dh parameter file using build-dh script? Did you check its permissions/folder location? If it can't find the file, then either you didn't create it, or it can't be read. Did you try the "--help" parameter, as the log said?

Also, are you starting this as root?

Altiris · 08-25-2013, 07:44 PM

Quote:

Originally Posted by TB0ne

Great...so did you create dh parameter file using build-dh script? Did you check its permissions/folder location? If it can't find the file, then either you didn't create it, or it can't be read. Did you try the "--help" parameter, as the log said?

Also, are you starting this as root?

There is no such dh1024.pem file HOWEVER I have a dh2048.pem file, weird right? Why is it doubled instead of just 1024? Alright for some reason by default the vars file had the key set to 2048 instead of 1024. I will put back to 1024.

Altiris · 08-25-2013, 08:21 PM

Everything is working now sweet!

EDIT: I can't connect to it now for some reason. I am using OpenVPN Client and I have port forwarded 1194 UDP and TCP.

Altiris · 09-02-2013, 03:27 PM

For some reason I cant connect, it says the connection is refused. Is my firewall on the server blocking something?

rosehosting.com · 09-02-2013, 07:15 PM

Edit your OpenVPN configuration file (i.e. /etc/openvpn/server.conf) and add/modify the following lines:

status openvpn-status.log
log openvpn.log
verb 6

Then, restart your OpenVPN service for the changes to take effect and check your '/etc/openvpn/openvpn.log' and '/etc/openvpn/openvpn-status.log' files to see if there are any connection problem messages which might help you to track down the problem.

Altiris · 09-03-2013, 07:39 PM

Quote:

Originally Posted by rosehosting.com

Edit your OpenVPN configuration file (i.e. /etc/openvpn/server.conf) and add/modify the following lines:

status openvpn-status.log
log openvpn.log
verb 6

Then, restart your OpenVPN service for the changes to take effect and check your '/etc/openvpn/openvpn.log' and '/etc/openvpn/openvpn-status.log' files to see if there are any connection problem messages which might help you to track down the problem.

Thanks, I did this and tried connecting from my windows pc, I get the error, I look in the log and it seems its not displaying anything...so its not even able to connect to it?

Altiris · 09-05-2013, 07:19 PM

Help please?

sundialsvcs · 09-05-2013, 08:03 PM

Yes, there is a good chance that your firewall is blocking it, if you get no log entries.

Altiris · 09-06-2013, 08:44 AM

Quote:

Originally Posted by sundialsvcs

Yes, there is a good chance that your firewall is blocking it, if you get no log entries.

I disabled the firewall though and I still couldnt connect. Did I mess up somewhere when making the CA files?

TB0ne · 09-06-2013, 11:29 AM

Quote:

Originally Posted by Altiris

I disabled the firewall though and I still couldnt connect. Did I mess up somewhere when making the CA files?

No...again, if you're not getting ANY log file entries, that means there is no connection being seen. Which means it's getting blocked SOMEWHERE. You don't really say anything about your network topology, where these machines are that you're trying to connect, and what they're running through.

Altiris · 09-06-2013, 12:23 PM

Quote:

Originally Posted by TB0ne

No...again, if you're not getting ANY log file entries, that means there is no connection being seen. Which means it's getting blocked SOMEWHERE. You don't really say anything about your network topology, where these machines are that you're trying to connect, and what they're running through.

Sorry, I will try and clarify. I have OpenVPN setup on a linux box with an ip of 192.168.12.137. I try connecting to my personal PC tot he OpenVPN server locally using the OpenVPN Client by typing 192.168.12.137:11904. The OpenVPN Client allows me to select the .ovpn file and I do, I hit connect and it says conncetion refused.

JML_SUSA · 09-09-2013, 06:11 AM

Hi guys,

I currently use Ceano Colt for cloud hosting. Anyone else here used Ceano's cloud hosting services to setup and configure an OpenVPN server on CentOS 6 ?!