OpenVPN service can't start

luffer

We've been running pfsense for 6 years now and never experienced this problem. Nothing has changed in our configs, yet openVPN service can't start. All other services are up and working.
What I see in logs when restarting is the following:

rc.bootup: The command '/usr/local/sbin/openvpn --config '/var/etc/openvpn/server1.conf'' returned exit code '1', the output was 'Shared object "libssl.so.8" not found, required by "openvpn"'

Thanks.

Gertjan

@luffer

[22.05-RELEASE][root@pfSense.my-own-local-network.net]/root: ldd /usr/local/sbin/openvpn
/usr/local/sbin/openvpn:
        liblzo2.so.2 => /usr/local/lib/liblzo2.so.2 (0x800307000)
        liblz4.so.1 => /usr/local/lib/liblz4.so.1 (0x80033a000)
        libssl.so.111 => /usr/lib/libssl.so.111 (0x80036b000)
        libcrypto.so.111 => /lib/libcrypto.so.111 (0x800410000)
        libdl.so.1 => /usr/lib/libdl.so.1 (0x80070e000)
        libinotify.so.0 => /usr/local/lib/libinotify.so.0 (0x800712000)
        libnv.so.0 => /lib/libnv.so.0 (0x80071c000)
        libc.so.7 => /lib/libc.so.7 (0x800732000)
        libthr.so.3 => /lib/libthr.so.3 (0x800b0e000)

Some very important information is shown here :
I'm using the latest : 22.05-Release.
What are you using ? 2.6.0 ?

Also : did you upgrade / update something recently ?

The file should be here : /usr/lib/

@luffer said in OpenVPN service can't start:

We've been running pfsense for 6 years ...... and "libssl.so.8"

Makes me wonder. Is your pfSense really 6 years old ?

luffer

@gertjan

Thanks for your help. Much appreciated.

[2.3.4-RELEASE][admin@pfSense.luff.lan]/root: ldd /usr/local/sbin/openvpn
/usr/local/sbin/openvpn:
	liblzo2.so.2 => /usr/local/lib/liblzo2.so.2 (0x8008c4000)
	liblz4.so.1 => /usr/local/lib/liblz4.so.1 (0x800af2000)
	libssl.so.8 => not found (0)
	libcrypto.so.8 => not found (0)
	libc.so.7 => /lib/libc.so.7 (0x800d0f000)

As you can see it's 2.3.4 from July 2017, so 5 years then.
Nothing has changed since last week. Users were connecting successfully on Sunday looking by logs.

Gertjan

@luffer said in OpenVPN service can't start:

Nothing has changed since last week.

Something changed. And that why you posted here : /usr/lib//libssl.so.8 is missing now.
And "libcrypto.so.8" also.

Anyway. It's time abandon the ship, or do what we all do : upgrade .... ;)

luffer

@gertjan

Now I see problems with upgrade process.
In my 'Update Settings', 'Firmware Branch' is set to 'Stable'
When I go to 'System Update' tab I get:

Current Base System: (blank)
Latest Base System: (blank)
Retrieving: Unable to check for updates

Thanks.

Gertjan

@luffer said in OpenVPN service can't start:

Now I see problems

2.3.4 : you can't upgrade with the click of a button any more.

IMHO, the safest path is now : as always, make a the XML config backup file.
It will containt 'text' of all your pfSense settings.

Get a copy of pfSense ( keep in mind : hardware must be 64 bits, as 32 bits is dead for years now) and build a boot USB drive.
Boot from if, take a breach, have your disk repartionned - chose the new ZFS filesystem while doing so, and re install clean.

Now, first choice : import you config back in ( and light a candle ) : this might work.
Or, worst case : use your config XML to re do the settings.

luffer

@gertjan

Will do so. @gertjan, thank you very much for all your help.
Take care.