OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 18.1 Legacy Series »
  • [SOLVED] OpenVPN will not start on 18.1.r1
« previous next »
  • Print
Pages: [1] 2 3

Author Topic: [SOLVED] OpenVPN will not start on 18.1.r1  (Read 13302 times)

elektroinside

  • Hero Member
  • *****
  • Posts: 574
  • Karma: 51
    • View Profile
[SOLVED] OpenVPN will not start on 18.1.r1
« on: January 12, 2018, 07:50:34 pm »
Franco, switched to devel, upgraded to rc1  ;D
Just couldn't wait  ::)

But now.. OpenVPN server will not start:

Code: [Select]
Jan 12 20:46:02 openvpn[56490]: Use --help for more information.
Jan 12 20:46:02 openvpn[56490]: Options error: --verify-client-cert none|optional must be used with --management-client-auth, an --auth-user-pass-verify script, or plugin
Jan 12 20:46:02 openvpn[56490]: DEPRECATED OPTION: --client-cert-not-required, use --verify-client-cert instead
« Last Edit: January 13, 2018, 10:44:59 am by franco »
Logged
OPNsense v18 | HW: Gigabyte Z370N-WIFI, i3-8100, 8GB RAM, 60GB SSD, | Controllers: 82575GB-quad, 82574, I221, I219-V | PPPoE: RDS Romania | Down: 980Mbit/s | Up: 500Mbit/s

Team Rebellion Member

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13679
  • Karma: 1176
    • View Profile
Re: OpenVPN will not start on 18.1.r1
« Reply #1 on: January 12, 2018, 08:19:06 pm »
Hi there,

Whoops, try this then: https://github.com/opnsense/core/commit/0ec330d7

Apply via console...

# opnsense-patch 0ec330d7


Cheers,
Franco
Logged

elektroinside

  • Hero Member
  • *****
  • Posts: 574
  • Karma: 51
    • View Profile
Re: OpenVPN will not start on 18.1.r1
« Reply #2 on: January 12, 2018, 08:25:19 pm »
Yep, this did it, fixed.

P.S. The support here is incredible!  :)

Thank you!
Logged
OPNsense v18 | HW: Gigabyte Z370N-WIFI, i3-8100, 8GB RAM, 60GB SSD, | Controllers: 82575GB-quad, 82574, I221, I219-V | PPPoE: RDS Romania | Down: 980Mbit/s | Up: 500Mbit/s

Team Rebellion Member

mimugmail

  • Hero Member
  • *****
  • Posts: 6296
  • Karma: 433
    • View Profile
Re: OpenVPN will not start on 18.1.r1
« Reply #3 on: January 13, 2018, 06:47:16 am »
Also fixed for me, thanks! :)
Logged
Twitter: mimu_muc
WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13679
  • Karma: 1176
    • View Profile
Re: [SOLVED] OpenVPN will not start on 18.1.r1
« Reply #4 on: January 13, 2018, 10:46:54 am »
Thanks guys!

@elektroinside

Can you try this patch on top? https://github.com/opnsense/core/commit/d215ab49

# opnsense-patch d215ab49

(rerun again to remove if not working)

@mimugmail

Same error or different one? It's important.
Logged

elektroinside

  • Hero Member
  • *****
  • Posts: 574
  • Karma: 51
    • View Profile
Re: [SOLVED] OpenVPN will not start on 18.1.r1
« Reply #5 on: January 13, 2018, 11:49:48 am »
Hi Franco,

I did, but cannot tell if it's working because:

  • My alias resolution stopped working for some reason
  • Every time i reboot, i also need to restart pf in order to get the DNS resolution working

I was investigating this until i saw your post, i'll remove the alias rule to test the VPN patch and get back with the results.

In the meantime, do you have any idea why pf is behaving like this? The alias issue also could be a problem from pf?

Thanks.
Logged
OPNsense v18 | HW: Gigabyte Z370N-WIFI, i3-8100, 8GB RAM, 60GB SSD, | Controllers: 82575GB-quad, 82574, I221, I219-V | PPPoE: RDS Romania | Down: 980Mbit/s | Up: 500Mbit/s

Team Rebellion Member

elektroinside

  • Hero Member
  • *****
  • Posts: 574
  • Karma: 51
    • View Profile
Re: [SOLVED] OpenVPN will not start on 18.1.r1
« Reply #6 on: January 13, 2018, 11:58:20 am »
Confirming that d215ab49 vpn patch works fine:
  • VPN clients connected
  • Internet connection up & running (my server has "redirect gateway" enabled)
  • Local clients browsable (on the vpn server side)

Issues remaining on my side: the alias resolution and the strange need to restart pf after OPNsense reboot...
« Last Edit: January 13, 2018, 12:00:24 pm by elektroinside »
Logged
OPNsense v18 | HW: Gigabyte Z370N-WIFI, i3-8100, 8GB RAM, 60GB SSD, | Controllers: 82575GB-quad, 82574, I221, I219-V | PPPoE: RDS Romania | Down: 980Mbit/s | Up: 500Mbit/s

Team Rebellion Member

elektroinside

  • Hero Member
  • *****
  • Posts: 574
  • Karma: 51
    • View Profile
Re: [SOLVED] OpenVPN will not start on 18.1.r1
« Reply #7 on: January 13, 2018, 12:16:25 pm »
Update:

https://github.com/opnsense/core/commit/60e4e8080 seems to have fixed the alias problem.

I still need to restart pf in order to get the internet working...
Logged
OPNsense v18 | HW: Gigabyte Z370N-WIFI, i3-8100, 8GB RAM, 60GB SSD, | Controllers: 82575GB-quad, 82574, I221, I219-V | PPPoE: RDS Romania | Down: 980Mbit/s | Up: 500Mbit/s

Team Rebellion Member

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13679
  • Karma: 1176
    • View Profile
Re: [SOLVED] OpenVPN will not start on 18.1.r1
« Reply #8 on: January 13, 2018, 12:37:48 pm »
What kind of WAN link do you use? Does this affect IPv4 and IPv6 or just one of them? Can you ping the Internet from the OPNsense box before restarting pf?


Cheers,
Franco
Logged

elektroinside

  • Hero Member
  • *****
  • Posts: 574
  • Karma: 51
    • View Profile
Re: [SOLVED] OpenVPN will not start on 18.1.r1
« Reply #9 on: January 13, 2018, 01:07:29 pm »
Quote from: franco on January 13, 2018, 12:37:48 pm
What kind of WAN link do you use? Does this affect IPv4 and IPv6 or just one of them? Can you ping the Internet from the OPNsense box before restarting pf?


Cheers,
Franco
It's a PPPoE link. Disabling IPv6 on the WAN didn't help, so IPv4 for sure is affected. I can reproduce every time.

I can ping from the OPNsense box, i can't from the LAN clients, not until i restart pf. This was not an issue with 17.7.11 (latest stable from the 17 branch, i guess this is it).
Logged
OPNsense v18 | HW: Gigabyte Z370N-WIFI, i3-8100, 8GB RAM, 60GB SSD, | Controllers: 82575GB-quad, 82574, I221, I219-V | PPPoE: RDS Romania | Down: 980Mbit/s | Up: 500Mbit/s

Team Rebellion Member

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13679
  • Karma: 1176
    • View Profile
Re: [SOLVED] OpenVPN will not start on 18.1.r1
« Reply #10 on: January 13, 2018, 01:12:59 pm »
Can you try flipping this patch to see if it helps?

https://github.com/opnsense/core/commit/50e53ab4


Cheers,
Franco
Logged

elektroinside

  • Hero Member
  • *****
  • Posts: 574
  • Karma: 51
    • View Profile
Re: [SOLVED] OpenVPN will not start on 18.1.r1
« Reply #11 on: January 13, 2018, 01:30:07 pm »
So..

Code: [Select]
Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|From 50e53ab4a0698f08c21f1b8efefb10622224483a Mon Sep 17 00:00:00 2001
|From: Franco Fichtner <franco@opnsense.org>
|Date: Sat, 16 Sep 2017 17:57:46 +0200
|Subject: [PATCH] interfaces: reload filter before reloading plugins for
| connectivity
|
|PR: https://forum.opnsense.org/index.php?topic=4727.0
|PR: https://github.com/opnsense/core/issues/1403
|---
| src/etc/rc.newwanip   | 7 ++++---
| src/etc/rc.newwanipv6 | 7 ++++---
| 2 files changed, 8 insertions(+), 6 deletions(-)
|
|diff --git a/src/etc/rc.newwanip b/src/etc/rc.newwanip
|index 8271b8476..486d3e2a5 100755
|--- a/src/etc/rc.newwanip
|+++ b/src/etc/rc.newwanip
--------------------------
Patching file etc/rc.newwanip using Plan A...
Reversed (or previously applied) patch detected!  Assuming -R.Hunk #1 succeeded                                                                                                                                                              at 162.
Hmm...  The next patch looks like a unified diff to me...
The text leading up to this was:
--------------------------
|diff --git a/src/etc/rc.newwanipv6 b/src/etc/rc.newwanipv6
|index 6d1259713..1438c4f51 100755
|--- a/src/etc/rc.newwanipv6
|+++ b/src/etc/rc.newwanipv6
--------------------------
Patching file etc/rc.newwanipv6 using Plan A...
Reversed (or previously applied) patch detected!  Assuming -R.Hunk #1 succeeded                                                                                                                                                              at 143.
done
All patches have been applied successfully.  Have a nice day.


After applying the patch, i logged in the GUI. After ~30secs got logged out automatically (something has restarted/reloaded stuff which logged me out) from the GUI, but on the other hand, on the LAN side things started to work again without pf restart.

And so i reapplied the patch, and back to the issue, reproduced again.
Logged
OPNsense v18 | HW: Gigabyte Z370N-WIFI, i3-8100, 8GB RAM, 60GB SSD, | Controllers: 82575GB-quad, 82574, I221, I219-V | PPPoE: RDS Romania | Down: 980Mbit/s | Up: 500Mbit/s

Team Rebellion Member

elektroinside

  • Hero Member
  • *****
  • Posts: 574
  • Karma: 51
    • View Profile
Re: [SOLVED] OpenVPN will not start on 18.1.r1
« Reply #12 on: January 13, 2018, 01:37:23 pm »
And so i removed the patch once again (basically trying again what you previously asked me, removing the patch).
It didn't work this time. I did not got logged out from the GUI and i still needed to restart pf...
Logged
OPNsense v18 | HW: Gigabyte Z370N-WIFI, i3-8100, 8GB RAM, 60GB SSD, | Controllers: 82575GB-quad, 82574, I221, I219-V | PPPoE: RDS Romania | Down: 980Mbit/s | Up: 500Mbit/s

Team Rebellion Member

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13679
  • Karma: 1176
    • View Profile
Re: [SOLVED] OpenVPN will not start on 18.1.r1
« Reply #13 on: January 13, 2018, 01:53:21 pm »
Sounds like a timing issue, your PPPoE could be slow to receive an IP initially. I don't think the GUI logout is related.

Are you using OpenVPN, IPsec or Dynamic DNS?

If you don't mind, from just having fixed the non-working state, I would like to inspect the diff of the generated rules:

# diff -u /tmp/rules.debug{.old,}


Cheers,
Franco
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13679
  • Karma: 1176
    • View Profile
Re: [SOLVED] OpenVPN will not start on 18.1.r1
« Reply #14 on: January 13, 2018, 01:54:01 pm »
PS: Meh, this thread started with talk about OpenVPN... Are you using OpenVPN to push LAN traffic elsewhere?
Logged

  • Print
Pages: [1] 2 3
« previous next »
  • OPNsense Forum »
  • Archive »
  • 18.1 Legacy Series »
  • [SOLVED] OpenVPN will not start on 18.1.r1
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2