Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    openvpn.conf is not readable

    Scheduled Pinned Locked Moved OpenVPN
    openvpn.confdaemonserviceopenvpn
    1 Posts 1 Posters 98 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      Varmandra
      last edited by

      Hello

      I am not sure why it happens but after some day or weeks OpenVPN stops working,

      The GUI shows me:
      202b7367-7452-4542-8100-6507fefa1e72-grafik.png

      So I thoght why not start the openvpn service over shh

      [24.11-RELEASE][]/home/theodor: service openvpn status
      openvpn is not running.
      [24.11-RELEASE][]/home/theodor: service openvpn start
      Cannot 'start' openvpn. Set openvpn_enable to YES in /etc/rc.conf or use 'onestart' instead of 'start'.
      [24.11-RELEASE][]/home/theodor: service openvpn onestart
      /usr/local/etc/rc.d/openvpn: WARNING: /usr/local/etc/openvpn/openvpn.conf is not readable.
      /usr/local/etc/rc.d/openvpn: WARNING: failed precmd routine for openvpn
      
      

      I tried to take a look to the folder /usr/local/etc/openvpn bit there is nothing with openvpn in /usr/local/etc
      bf37f6b8-531f-4e0d-8426-a576143ee767-grafik.png

      I set up openvpn close to this toturial

      There are some warnings inside the log and this repeats many times

      Mar 7 23:54:55 	openvpn 	7621 	WARNING: experimental option --capath /var/etc/openvpn/server1/ca
      Mar 7 23:54:55 	openvpn 	7621 	SIGTERM[hard,init_instance] received, process exiting
      Mar 7 23:54:56 	openvpn 	24611 	OpenVPN 2.6.12 amd64-portbld-freebsd15.0 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] [DCO]
      Mar 7 23:54:56 	openvpn 	24611 	library versions: OpenSSL 3.0.14 4 Jun 2024, LZO 2.10
      Mar 7 23:54:56 	openvpn 	24611 	DCO version: FreeBSD 15.0-CURRENT #0 plus-RELENG_24_11-n256407-1bbb3194162: Fri Nov 22 05:08:46 UTC 2024 root@freebsd:/var/jenkins/workspace/pfSense-Plus-snapshots-24_11-main/obj/amd64/AKWlAIiM/var/jenkins/workspace/pfSense-Plus-snapshots-24_11-main/sources/FreeBS
      Mar 7 23:54:56 	openvpn 	24645 	WARNING: using --duplicate-cn and --client-config-dir together is probably not what you want
      Mar 7 23:54:56 	openvpn 	24645 	NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
      Mar 7 23:54:56 	openvpn 	24645 	WARNING: experimental option --capath /var/etc/openvpn/server1/ca
      Mar 7 23:54:56 	openvpn 	24645 	SIGTERM[hard,init_instance] received, process exiting
      Mar 7 23:54:56 	openvpn 	41894 	OpenVPN 2.6.12 amd64-portbld-freebsd15.0 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] [DCO]
      Mar 7 23:54:56 	openvpn 	41894 	library versions: OpenSSL 3.0.14 4 Jun 2024, LZO 2.10
      Mar 7 23:54:56 	openvpn 	41894 	DCO version: FreeBSD 15.0-CURRENT #0 plus-RELENG_24_11-n256407-1bbb3194162: Fri Nov 22 05:08:46 UTC 2024 root@freebsd:/var/jenkins/workspace/pfSense-Plus-snapshots-24_11-main/obj/amd64/AKWlAIiM/var/jenkins/workspace/pfSense-Plus-snapshots-24_11-main/sources/FreeBS
      Mar 7 23:54:56 	openvpn 	41896 	WARNING: using --duplicate-cn and --client-config-dir together is probably not what you want
      Mar 7 23:54:56 	openvpn 	41896 	NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
      Mar 7 23:54:56 	openvpn 	41896 	WARNING: experimental option --capath /var/etc/openvpn/server1/ca
      Mar 7 23:54:56 	openvpn 	41896 	TUN/TAP device ovpns1 exists previously, keep at program end
      Mar 7 23:54:56 	openvpn 	41896 	TUN/TAP device /dev/tun1 opened
      Mar 7 23:54:56 	openvpn 	41896 	/sbin/ifconfig ovpns1 10.10.10.1/24 mtu 1500 up
      Mar 7 23:54:56 	openvpn 	41896 	/usr/local/sbin/ovpn-linkup ovpns1 1500 0 10.10.10.1 255.255.255.0 init
      Mar 7 23:54:56 	openvpn 	41896 	Could not determine IPv4/IPv6 protocol. Using AF_INET6
      Mar 7 23:54:56 	openvpn 	41896 	setsockopt(IPV6_V6ONLY=0)
      Mar 7 23:54:56 	openvpn 	41896 	UDPv6 link local (bound): [AF_INET6][undef]:1194
      Mar 7 23:54:56 	openvpn 	41896 	UDPv6 link remote: [AF_UNSPEC]
      Mar 7 23:54:56 	openvpn 	41896 	Initialization Sequence Completed
      Mar 7 23:55:22 	openvpn 	41896 	event_wait : Interrupted system call (fd=-1,code=4)
      Mar 7 23:55:24 	openvpn 	41896 	/sbin/ifconfig ovpns1 10.10.10.1 -alias
      Mar 7 23:55:24 	openvpn 	41896 	/usr/local/sbin/ovpn-linkdown ovpns1 1500 0 10.10.10.1 255.255.255.0 init
      Mar 7 23:55:24 	openvpn 	19127 	Flushing states on OpenVPN interface ovpns1 (Link Down)
      Mar 7 23:55:24 	openvpn 	41896 	SIGTERM[hard,] received, process exiting
      Mar 7 23:55:31 	openvpn 	32846 	OpenVPN 2.6.12 amd64-portbld-freebsd15.0 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] [DCO]
      Mar 7 23:55:31 	openvpn 	32846 	library versions: OpenSSL 3.0.14 4 Jun 2024, LZO 2.10
      Mar 7 23:55:31 	openvpn 	32846 	DCO version: FreeBSD 15.0-CURRENT #0 plus-RELENG_24_11-n256407-1bbb3194162: Fri Nov 22 05:08:46 UTC 2024 root@freebsd:/var/jenkins/workspace/pfSense-Plus-snapshots-24_11-main/obj/amd64/AKWlAIiM/var/jenkins/workspace/pfSense-Plus-snapshots-24_11-main/sources/FreeBS 
      

      Installed Packages:

      • acme
      • Cron
      • haproxy
      • Netgate_Firmware_Upgrade
      • openvpn-client-export
      • pfBlockerNG

      In the moment I don't realy know where to start searching for this error, could some

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.