[SOLVED] Bugs in OpenVpn Client part 17.1

Started by michaelvv, July 04, 2017, 11:11:04 AM

Previous topic - Next topic
July 04, 2017, 11:11:04 AM Last Edit: July 04, 2017, 01:32:41 PM by michaelvv
I have had a hard time to setup my VPN provider , using this excellent guide from M4DM4NZ
https://forum.opnsense.org/index.php?topic=4979.msg19771#msg19771.

Bug 1)

The problem was that every time I try too do a reboot, my VPN Client connection didn't came up.
On a working system I had these files in /var/etc/openvpn

-rw-------  1 root  wheel  2292 Jul  3 18:07 client1.ca
-rw-------  1 root  wheel  2392 Jul  3 18:07 client1.cert
-rw-------  1 root  wheel   705 Jul  3 18:07 client1.conf
-rw-------  1 root  wheel     3 Jul  3 18:07 client1.interface
-rw-------  1 root  wheel  3322 Jul  3 18:07 client1.key
srwxrwxrwx  1 root  wheel     0 Jul  3 19:09 client1.sock
-rw-------  1 root  wheel   657 Jul  3 16:07 client1.tls-auth
-rw-------  1 root  wheel    12 Jul  3 18:07 client1.up

After a Reboot

-rw-------  1 root  wheel  2292 Jul  4 10:57 client1.ca
-rw-------  1 root  wheel  2392 Jul  4 10:57 client1.cert
-rw-------  1 root  wheel   705 Jul  4 10:57 client1.conf
-rw-------  1 root  wheel     3 Jul  4 10:57 client1.interface
-rw-------  1 root  wheel  3322 Jul  4 10:57 client1.key
srwxrwxrwx  1 root  wheel     0 Jul  4 10:57 client1.sock
-rw-------  1 root  wheel   618 Jul  4 10:57 client1.tls-auth
-rw-------  1 root  wheel    12 Jul  4 10:57 client1.up

The client1.tls-auth got modified, and openvpn is not working anymore.

If I copy the original 657 Bytes back openvpn is working again.

Bug 2)

VPN: OpenVPN: Clients , If I open my Configuration and save it again. It make this
618 Bytes file does not work.

Took me a lot of time to figure out  :)




This might be the problem.

If I Add a CR+LF to the 618 bytes file client1.tls-auth so it's now 620 bytes.
It works. A LF only 619 bytes is not enought.


Entirely my own fault.

Now I can reboot/save without any issues...

Hi there,

Not entirely following. What was the reason? Is there anything we can do to prevent it in the future?  :)


Cheers,
Franco