OpenVPN client export utility

muffin

Hi Jimp

Still getting the same error. It still says p7zip-9.04. Can i install it manually maybe?

jimp

For i386, the p7zip 9.04 version is there.

> ls -l *p7*
-rw-rw-r--  1 packages  packagewr  1762952 Feb  3  2010 p7zip-9.04.tbz
-rw-r--r--  1 packages  packagewr  1806240 Sep  8 02:11 p7zip-9.13.tbz

It was amd64 that wasn't finding the right version (which I fixed)

Though I do see now that 9.13 has built for i386. I'll update the i386 package too. Give it a try in about 10 minutes.

muffin

Still no luck im afraid :(

Checking for successful package installation... of p7zip-9.13 failed!

jimp

I just tried it on my home router (i386) and it worked fine.

What other packages do you have installed? What shows up if you run "pkg_info" from the shell or Diagnostics > Command?

muffin

No other packages are installed.
I ran pkg_info and it returned: no packages installed.
I attempted to install the export utility again, and even though it failed it was still listed under Installed Packages. However, running pkg_info still returns no packages installed. ???

What about manually installed p7zip? Could i copy it via SCP and run a command in the shell to install it? It seems its the p7zip thats causing the problem, not the export utility itself.

jimp

That is normal, pkg_info will only show "FreeBSD style" packages, and not pfSense packages.

Try this:

pkg_add -r http://files.pfsense.org/packages/8/All/p7zip-9.13.tbz

muffin

Great, i think thats done it.

I ran that command, attempted to reinstall the export utility and it failed on zip-3.0.

I then ran:

pkg_add -r http://files.pfsense.org/packages/8/All/zip-3.0.tbz

Once it was downloaded i went to Installed Packages, reinstalled both XML and GUI components and it is now appearing under OpenVPN.

Thanks for your help jimp :)

uri_ba

Hi folks,
using the Sep. 24th Build BETA4.

installed the client-export package.

the GUI menu is there, but I can't seem to be able to generate the installers.
I'm selecting the server, but there is not "save" button or anything similar. what am I missing?

Thanks, Uri

jimp

In order to get installers you need one of the following:

A remote access "user auth" setup that does not use ssl/tls - which exports a general installer that just prompts for a password on connect. (e.g. auth against RADIUS or LDAP only)

or

A remote access "SSL/TLS" setup that has local users defined which have user certificates from the same CA as the remote access OpenVPN server instance.

or

A remote access "SSL/TLS + User Auth" setup against the local user database, which has local users defined which have user certificates from the same CA as the remote access OpenVPN server instance.

Most likely issue is that you have not yet made any user certificates, or these user certificates are not from the same CA as the OpenVPN server.

A remote access "SSL/TLS + User Auth" setup against a remote auth method (RADIUS or LDAP) will not be manageable through the exporter since there is no way to know what users are valid on the auth server in order to define them or make certs. You could make certs manually in the GUI and alter their config and such to take them, but it would not be automatic.

uri_ba

10x for the quick reply.
that was it..