Thema: OpenVPN einrichten

log /etc/openvpn/LOG.txt

zwischen log und slash leerzeichen !

mach aus
auth-user-pass hide.login
auth-user-pass /etc/openvpn/auth.txt

erstelle eine auth.txt und gib dort deine login daten ein

berichte

I can't login to my ProtonVPN account.

This is my log.

Any ideas?

Code:

Tue Apr  2 18:29:53 2019 WARNING: file 'password.conf' is group or others accessible
Tue Apr  2 18:29:53 2019 OpenVPN 2.4.3 mipsel-oe-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jan 22 2019
Tue Apr  2 18:29:53 2019 library versions: OpenSSL 1.0.2m  2 Nov 2017, LZO 2.10
Tue Apr  2 18:29:53 2019 WARNING: --ping should normally be used with --ping-restart or --ping-exit
Tue Apr  2 18:29:53 2019 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Tue Apr  2 18:29:53 2019 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Tue Apr  2 18:29:53 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]89.39.107.194:1194
Tue Apr  2 18:29:53 2019 Socket Buffers: R=[163840->163840] S=[163840->163840]
Tue Apr  2 18:29:53 2019 UDP link local: (not bound)
Tue Apr  2 18:29:53 2019 UDP link remote: [AF_INET]89.39.107.194:1194
Tue Apr  2 18:29:53 2019 TLS: Initial packet from [AF_INET]89.39.107.194:1194, sid=c3971d7e 20ada91c
Tue Apr  2 18:29:53 2019 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Apr  2 18:29:53 2019 VERIFY OK: depth=2, C=CH, O=ProtonVPN AG, CN=ProtonVPN Root CA
Tue Apr  2 18:29:53 2019 VERIFY OK: depth=1, C=CH, O=ProtonVPN AG, CN=ProtonVPN Intermediate CA 1
Tue Apr  2 18:29:53 2019 VERIFY KU OK
Tue Apr  2 18:29:53 2019 Validating certificate extended key usage
Tue Apr  2 18:29:53 2019 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Tue Apr  2 18:29:53 2019 VERIFY EKU OK
Tue Apr  2 18:29:53 2019 VERIFY OK: depth=0, CN=nl-113.protonvpn.com
Tue Apr  2 18:29:53 2019 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Tue Apr  2 18:29:53 2019 [nl-113.protonvpn.com] Peer Connection Initiated with [AF_INET]89.39.107.194:1194
Tue Apr  2 18:29:54 2019 SENT CONTROL [nl-113.protonvpn.com]: 'PUSH_REQUEST' (status=1)
Tue Apr  2 18:29:54 2019 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.8.8.1,sndbuf 524288,rcvbuf 524288,explicit-exit-notify,comp-lzo no,route-gateway 10.8.8.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.8.8.30 255.255.255.0,peer-id 28,cipher AES-256-GCM'
Tue Apr  2 18:29:54 2019 Option 'explicit-exit-notify' in [PUSH-OPTIONS]:5 is ignored by previous <connection> blocks 
Tue Apr  2 18:29:54 2019 OPTIONS IMPORT: timers and/or timeouts modified
Tue Apr  2 18:29:54 2019 OPTIONS IMPORT: explicit notify parm(s) modified
Tue Apr  2 18:29:54 2019 OPTIONS IMPORT: compression parms modified
Tue Apr  2 18:29:54 2019 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Tue Apr  2 18:29:54 2019 Socket Buffers: R=[163840->327680] S=[163840->327680]
Tue Apr  2 18:29:54 2019 OPTIONS IMPORT: --ifconfig/up options modified
Tue Apr  2 18:29:54 2019 OPTIONS IMPORT: route options modified
Tue Apr  2 18:29:54 2019 OPTIONS IMPORT: route-related options modified
Tue Apr  2 18:29:54 2019 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Apr  2 18:29:54 2019 OPTIONS IMPORT: peer-id set
Tue Apr  2 18:29:54 2019 OPTIONS IMPORT: adjusting link_mtu to 1657
Tue Apr  2 18:29:54 2019 OPTIONS IMPORT: data channel crypto options modified
Tue Apr  2 18:29:54 2019 Data Channel: using negotiated cipher 'AES-256-GCM'
Tue Apr  2 18:29:54 2019 Data Channel Encrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Apr  2 18:29:54 2019 Data Channel Decrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Apr  2 18:29:54 2019 ROUTE_GATEWAY 192.168.1.254/255.255.255.0 IFACE=eth0 HWADDR=XXXXXXXXXXX
Tue Apr  2 18:29:54 2019 TUN/TAP device tun1 opened
Tue Apr  2 18:29:54 2019 TUN/TAP TX queue length set to 100
Tue Apr  2 18:29:54 2019 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Apr  2 18:29:54 2019 /sbin/ip link set dev tun1 up mtu 1500
Tue Apr  2 18:29:54 2019 /sbin/ip addr add dev tun1 10.8.8.30/24 broadcast 10.8.8.255
Tue Apr  2 18:29:54 2019 /sbin/ip route add 89.39.107.194/32 via 192.168.1.254
RTNETLINK answers: File exists
Tue Apr  2 18:29:55 2019 ERROR: Linux route add command failed: external program exited with error status: 2
Tue Apr  2 18:29:55 2019 /sbin/ip route add 0.0.0.0/1 via 10.8.8.1
RTNETLINK answers: File exists
Tue Apr  2 18:29:55 2019 ERROR: Linux route add command failed: external program exited with error status: 2
Tue Apr  2 18:29:55 2019 /sbin/ip route add 128.0.0.0/1 via 10.8.8.1
RTNETLINK answers: File exists
Tue Apr  2 18:29:55 2019 ERROR: Linux route add command failed: external program exited with error status: 2
Tue Apr  2 18:29:55 2019 Initialization Sequence Completed

Tue Apr 2 18:29:53 2019 WARNING: file 'password.conf' is group or others accessible

Poste mal die *.conf ohne sensible Daten.

Linux route add command failed: external program exited with error status: 2

[Gelost] - Fehler beim Start von OpenVPN-Server: Linux route add command failed | IP Phone Forum

Client.conf

Code:

client
dev tun
proto udp
remote nl-free-01.protonvpn.com 1194
resolv-retry infinite
remote-random
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ping 15
ping-restart 0
ping-timer-rem
reneg-sec 0
comp-lzo no

remote-cert-tls server

auth-user-pass password.conf
auth-retry nointeract
verb 3
pull
fast-io
cipher AES-256-CBC
auth SHA512
log /etc/openvpn/openvpn.log
<ca>
-----BEGIN CERTIFICATE-----
XXXXXXXXXXX
-----END CERTIFICATE-----
</ca>

key-direction 1
<tls-auth>
# 2048 bit OpenVPN static key
-----BEGIN OpenVPN Static key V1-----
XXXXXXXXXXX
-----END OpenVPN Static key V1-----
</tls-auth>

From 192.168.1.100 to 192.168.1.199
Gateway 192.168.1.254
Subnet mask 255.255.255.0