Is this the same to install in a Ubuntu box? I’ve been stuck when generating the RSA files.

grep: /etc/openvpn/easy-rsa/2.0/openssl.cnf: No such file or directory pkitool: KEY_CONFIG (set by the ./vars script) is pointing to the wrong version of openssl.cnf: /etc/openvpn/easy-rsa/2.0/openssl.cnf The correct version should have a comment that says: easy-rsa version 2.x

Filipe Kiss: the directory in ubuntu is /etc/openvpn/easy-rsa2/

sorry I think I got that wrong.

./vars permission denied

tried it both on Ubuntu 12.04LTS x64 and Debian 7 x64

damn… I was trying to make vars executable using “-x” instead of “+x”, in any case it should be added to the tutorial.

Thats Trash!

@Robin: Is there anything I can help you with?

I got stuck in sudo ./vars it says sudo: vars: command not found

you ‘. vars’ or ‘source ./vars’.

it just loads variables into the environment, it doesn’t actually execute anything, per se.

Before the configuration, don’t forget to install the pkcs15-tool include in opensc library with this command: apt-get install opensc And edit the file ./vars with your correct informations.

And create the keys folder …

If you are loged as root from the folder /etc/openvpn/easy-rsa/2.0/ type the command: “source ./vars” instead of ./vars …

@DigitalOcean please see @do’s @dragan’s comments.

I don’t know why this tutorial has so many bugs. Could you please fix it ?

@as: What do you mean?

In order to work and with dns you must install dnsmasq. Also need some iptable rules…Post and that part

@:/etc/openvpn/easy-rsa/2.0# source ./vars NOTE: If you run ./clean-all, I will be doing a rm -rf on /etc/openvpn/easy-rsa/2.0/keys

why?

@erik.hennerfors: It’s not an error – it’s just warning you that if you run ./clean_all it will delete everything in the keys directory.

how about the firewall rules ?

Yup, what about firewall rules? I configured all as described. I can connect to my server without troubles. But internet doesn’t work - i need some forward rule for iptables.

@ozgur: @core.hor: Check out the last section of <a href=“https://gist.github.com/padde/5689930#enable-routing-web-traffic-through-vpn”>https://gist.github.com/padde/5689930#enable-routing-web-traffic-through-vpn</a>. Let me know if that helps.

@Kamal many thanks for link. I didn’t tried it, but i found another solution, that works for me:

iptables --flush iptables --table nat --flush iptables --delete-chain iptables --table nat delete-chain #forwarding and masquearading iptables --table nat --append POSTROUTING --out-interface eth0 -j MASQUERADE iptables --append FORWARD --in-interface tun0 -j ACCEPT #packet forwarding enable echo 1 > /proc/sys/net/ipv4/ip_forward

i tend to agree with robin: it’s a little vague. i wasn’t able to get it to work on the server following your guide. i found this one that seems to work a little better at:

   https://wiki.debian.org/openvpn%20for%20server%20and%20client   

at least i was able to get the server up and running and the client kind of sorta working using it’s instructions. john

i have done everything but when i restart the openvpn daemon, it failed… i went and saw the daemon log and it gave this error:

Cannot open file key file ‘ta.key’: No such file or directory (errno=2)

how do i resolve this? i googled a bit it asked me generate a ta.key file… but i have no idea in which directory it lies… HELP ME!!

@sk_90_y: What’s the output of <pre>grep -ri ta /etc/openvpn/server.conf</pre>

I haven’t got this working for me when I hit the sudo ./vars step. It keeps asking for me to make sure I source the vars file first.

I find this tutorial helpful, but there is a bit more details here: http://www.openlogic.com/wazi/bid/188052/From-Zero-to-OpenVPN-in-30-Minutes

My VPN clients are all gentoo based, here is how to make the VPN connection start on boot (gentoo specific): http://lpig.wordpress.com/2011/02/11/gentoo-as-a-openvpn-client/

For the ./vars issue, I found a solution here, and it also works in my case.

2. Open the terminal and type sudo su to log in as root
3. move to the easy-rsa directory (on mine, the files are in easy-rsa/2.0/)
4. type mkdir keys
5. type source ./vars
6. type ./clean-all
7. type ./build-ca …

You may want to add to the guide that vars, clean-all and build-ca are not executable. Naturally you just have to run “sudo chmod +x vars clean-all build-ca” after cd’ing to /etc/openvpn/easy-rsa/2.0/.

This might be relevant and helpful for those having issues loading the tun device / tun kernel module: modprobe tun - ERROR: could not insert ‘tun’: Unknown symbol in module

Hi, i’m getting this error when I try to start openvpn service:

root@VPN:~# service openvpn restart
[ ok ] Stopping virtual private network daemon:.
[....] Starting virtual private network daemon: serverSIOCSIFADDR: No such device
: ERROR while getting interface flags: No such device
SIOCSIFDSTADDR: No such device
: ERROR while getting interface flags: No such device
SIOCSIFMTU: No such device
 failed!

To get this working with all my traffic (inc web browsing) I had to:

Edit my server.conf by uncommenting push “redirect-gateway def1 bypass-dhcp” as well as push “dhcp-option DNS <ip>” push “dhcp-option DNS <ip>”

Install dnsmasq change DEFAULT_FORWARD_POLICY to ACCEPT in /etc/default/ufw uncomment net.ipv4.ip_forward=1 in /etc/ufw/sysctl.conf

add

nat Table rules

*nat :POSTROUTING ACCEPT [0:0]

Forward traffic from wlan0 through eth0

-A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

don’t delete the ‘COMMIT’ line or these nat table rules won’t be processed

COMMIT

to /etc/ufw/before.rules (very top of file)

allow 1194/udp in ufw.

restart firewall and networking and all worked finally :|

running Debian 7 x64

cp: cannot stat ‘/usr/share/doc/openvpn/examples/easy-rsa’: No such file or directory

I’m getting this error. :/

all command work normally except “/etc/init.d/openvpn restart” I am using WD MyCloud EX2Ultra and try to install openvpn service on it. some command need to change like “apt-get” transfer to “opkg”.