OpenVPN not creating tun0

Installing and Using OpenWrt Network and Wireless Configuration
1

Hello, i´m new here and trying to use my Archer C50 V1 as a VPN Router.

I installed the newest FW (22.03.5) with OpenVPN - Open SSL and the OpenVPN - Luci addon.

After getting my Config to work it dosent start the tun0 interface and i dont know why, Open VPN log dosent give me any errors:

Open VPN Log:

Wed Aug 16 14:49:50 2023 daemon.warn openvpn(EbayOVPN)[6197]: DEPRECATED OPTION: ncp-disable. Disabling cipher negotiation is a deprecated debug feature that will be removed in OpenVPN 2.6
Wed Aug 16 14:49:50 2023 daemon.warn openvpn(EbayOVPN)[6197]: DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
Wed Aug 16 14:49:50 2023 daemon.notice openvpn(EbayOVPN)[6197]: OpenVPN 2.5.7 mipsel-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
Wed Aug 16 14:49:50 2023 daemon.notice openvpn(EbayOVPN)[6197]: library versions: OpenSSL 1.1.1v 1 Aug 2023, LZO 2.10
Wed Aug 16 14:49:50 2023 daemon.warn openvpn(EbayOVPN)[6197]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Aug 16 14:49:50 2023 daemon.notice openvpn(EbayOVPN)[6197]: Control Channel MTU parms [ L:1621 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Wed Aug 16 14:49:50 2023 daemon.notice openvpn(EbayOVPN)[6197]: Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Wed Aug 16 14:49:50 2023 daemon.notice openvpn(EbayOVPN)[6197]: Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1569,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Wed Aug 16 14:49:50 2023 daemon.notice openvpn(EbayOVPN)[6197]: Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1569,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Wed Aug 16 14:49:50 2023 daemon.notice openvpn(EbayOVPN)[6197]: TCP/UDP: Preserving recently used remote address: [AF_INET][iP Adress i removed]
Wed Aug 16 14:49:50 2023 daemon.notice openvpn(EbayOVPN)[6197]: Socket Buffers: R=[180224->180224] S=[180224->180224]
Wed Aug 16 14:49:50 2023 daemon.notice openvpn(EbayOVPN)[6197]: UDP link local: (not bound)
Wed Aug 16 14:49:50 2023 daemon.notice openvpn(EbayOVPN)[6197]: UDP link remote: [AF_INET][iP Adress i removed]
Wed Aug 16 14:49:50 2023 daemon.notice openvpn(EbayOVPN)[6197]: TLS: Initial packet from [AF_INET][iP Adress i removed], sid=50212e32 7b2f100a
Wed Aug 16 14:49:51 2023 daemon.notice openvpn(EbayOVPN)[6197]: VERIFY OK: depth=1, C=RO, L=Bucharest, O=CyberGhost S.A., CN=CyberGhost Root CA, emailAddress=info@cyberghost.ro
Wed Aug 16 14:49:51 2023 daemon.notice openvpn(EbayOVPN)[6197]: VERIFY KU OK
Wed Aug 16 14:49:51 2023 daemon.notice openvpn(EbayOVPN)[6197]: Validating certificate extended key usage
Wed Aug 16 14:49:51 2023 daemon.notice openvpn(EbayOVPN)[6197]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Aug 16 14:49:51 2023 daemon.notice openvpn(EbayOVPN)[6197]: VERIFY EKU OK
Wed Aug 16 14:49:51 2023 daemon.notice openvpn(EbayOVPN)[6197]: VERIFY OK: depth=0, CN=amsterdam-rack406.nodes.gen4.ninja

other then the DEPRECATED OPTION warning it tells me its started right? in the GUI is also shown started.

MY Config:

client
remote [MYSERVERIP]
dev tun0
proto udp
askpass /etc/openvpn/EbayOVPN.auth

resolv-retry infinite
redirect-gateway def1
persist-key
persist-tun
nobind
cipher AES-256-CBC
ncp-disable
auth SHA256
ping 5
ping-exit 60
ping-timer-rem
explicit-exit-notify 2
script-security 2
remote-cert-tls server
route-delay 5
verb 4

[CERTIFICATS I REMOVED]

also adding the tun0 manully dosent work, just saying: Error: Network device is not present

idk what to do, pls help.

2

First of all, please use the preformated text (the </> button) when posting code snippets and console output, it is easier to read.
Apart from that, the logs you posted earlier are inconclusive, that is there is no message that tunnel was established or what is the error for not establishing it.

3

Ok thanks, will do that.

I know but thats all what i get from the system logs, is there another OpenVPN Log?

4

First you should wait a couple of minutes and then look again at the log for a TLS-negotiation error

I am not sure if askpass is supported if not then openvpn might hang if the username or password are wrong.

Replace askpass with auth-user-pass

Is the file /etc/openvpn/EbayOVPN.auth present and does it contain the generated username and password on a separate line?
(OpenVPN 2.6 can set username and password in line but you most certainly have an older version)

5

No Error after Any time (i'm trying this since 3days)

I can change askapss If you want but it works, also changing the Passwort, promts me with a Handshake Error so yes the File is there and works.

6

Use your phone or another device to see if the config is working

7

The log you posted just stops at the point where the server would challenge for the password, if the server is configured for password authorization. Ordinarily a lot more things would happen such as negotiation of encryption and IP addresses, finally the creation of tun0. The last message from OpenVPN to the log should be "Initialization Sequence Completed"

If you're now getting an error, post the log with the error.

And it's definitely auth-user-pass /full/path/passwordfile. I think that askpass is a setting for server mode.

1 Like
8

Hehe :sweat_smile: yeah that was it. Askpass was wrong. Damn ... wasted 3 days because of that.

Thank you very much.

1 Like
9

If you are satisfied and have a working solution for your use case please mark that solution as solved:

2 Likes