WARNING: cannot stat file & Options error: --pkcs12 fails with
-
That's a generic error that basically means it can't reach the server.
You'd have to check on the server side to know more. Could be that it can't get to the server itself (wrong server IP address/hostname), could be firewall rules there that aren't letting it in (check the pfSense firewall log), could be something the OpenVPN server is rejecting (check the pfSense OpenVPN log).
-
Hi,
thanks for the answer!
I have checked the OpenVPN Log in the dashboard.
Seems like there is someting wrong. But i have no idea what i could have configured wrong.I tested it with the same configuration in my virtual environment (VirtualBox) and have no problem.
Here the output from the logfile. It looks like an error with an parameter? Am i right?
Or maybe the signal to end the process?
-
There are no fatal errors in there, or even client connections.
That's the server process restarting and then saying it's ready to receive connections.
I'd say somehow the client is not reaching the server. Could be anything in between (WAN firewall rules, upstream firewall/gateway, ISP, etc)
-
I have tested with my pfSense which is directly connected on the wan.
There is no Firewall between the pfsense and the wan. On the pfSense i set the openVPN Rule with port 1194.I have tested it with exactly the same configuration in my VirtualBox environment sucessfully.
I cant find the problem
Any idea how to find out why the connection is not being made?
The pfSense has connection to the wan. -
You'll need to test and see if the traffic is even making it to pfSense.
There are suggestions on https://docs.netgate.com/pfsense/en/latest/routing/connectivity-troubleshooting.html which may help, and even though https://docs.netgate.com/pfsense/en/latest/nat/port-forward-troubleshooting.html is for port forwarding, many of the same suggestions apply, just ignore the parts which mention NAT (like steps 1 and 2, and in step 3 just edit the firewall rule which allows the VPN through)
-
Hi,
i took a look into your given links and followed the instructions.
Unfortunately, it still doesn't work for me. NAT Mode is set to automatically and even when i open everything (i have a dedicated wan port for only test environments, so dont worry about that) i doesn't work.
I checked the log files as well but can't find nothing.
-
Did you follow all of the steps in those documents? It would have led you to the failure. What were the results of each step? Did you see the incoming traffic in a packet capture? in the state table? firewall log?
-
https://docs.netgate.com/pfsense/en/latest/routing/connectivity-troubleshooting.html
WAN Interface
- IP is correct
- Subnet mask is correct
- GW is correct
- Connectivity with the WAN can be established
LAN Interface
- IP is correct
- Subnet mask is correct
- GW is not set
- Block Private Networks & Block Bogon Networks are not set
I configure the WAN Interface and open Port 1194 while creating a rule during the creating the openvpn server.
I configure the LAN Interface with any any (for tests).
I can`t see any block or pass traffic in the System Logs -> Firewall.So I think there is no in-depth attempt to connect?
-
Did you set the WAN rule passing 1194 traffic to log?
Do you see anything for port 1194 in the state table? (Diagnostics > States)
Do you see anything on WAN for port 1194 in a packet capture?
-
@jimp said in WARNING: cannot stat file & Options error: --pkcs12 fails with:
Did you set the WAN rule passing 1194 traffic to log?
Yes. i did it during the creation of the OpenVPN server.
@jimp said in WARNING: cannot stat file & Options error: --pkcs12 fails with:
Do you see anything for port 1194 in the state table? (Diagnostics > States)
Do you see anything on WAN for port 1194 in a packet capture?Nope. Unfortunately, i see nothing for port 1194.
-
If you see nothing on WAN for 1194, and the IP address and port are correct in the client log, then it is being blocked before it reaches pfSense. Either by a CPE/Modem/Router in front of pfSense or by the ISP itself.
