Как исправить ошибку при старте OpenVPN на VPS?

Question

[verified]

Не получается завести OpenVPN на удаленном VPS (CentOS). При попытке старта service openvpn start выводится Starting openvpn: [FAILED]

В чем может быть проблема?

openvpn.log

Wed Mar 26 12:07:52 2014 OpenVPN 2.3.2 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS$
Wed Mar 26 12:07:52 2014 Diffie-Hellman initialized with 2048 bit key
Wed Mar 26 12:07:52 2014 Socket Buffers: R=[124928->131072] S=[124928->131072]
Wed Mar 26 12:07:52 2014 ROUTE_GATEWAY 10.0.20.227/255.255.0.0 IFACE=eth0 HWADDR=fa:16:3e:78:75:57
Wed Mar 26 12:07:52 2014 TUN/TAP device tun1 opened
Wed Mar 26 12:07:52 2014 TUN/TAP TX queue length set to 100
Wed Mar 26 12:07:52 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Mar 26 12:07:52 2014 /sbin/ip link set dev tun1 up mtu 1500
Wed Mar 26 12:07:52 2014 /sbin/ip addr add dev tun1 local 10.8.0.1 peer 10.8.0.2
Wed Mar 26 12:07:52 2014 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Wed Mar 26 12:07:53 2014 GID set to nobody
Wed Mar 26 12:07:53 2014 UID set to nobody
Wed Mar 26 12:07:53 2014 UDPv4 link local (bound): [undef]
Wed Mar 26 12:07:53 2014 UDPv4 link remote: [undef]
Wed Mar 26 12:07:53 2014 MULTI: multi_init called, r=256 v=256
Wed Mar 26 12:07:53 2014 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Wed Mar 26 12:07:53 2014 IFCONFIG POOL LIST
Wed Mar 26 12:07:53 2014 Initialization Sequence Completed

server.conf

proto udp
dev tun

ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh2048.pem

server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt

push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"

keepalive 10 120
comp-lzo

user nobody
group nobody

verb 5

persist-key
persist-tun

status /var/log/openvpn.status
log-append /var/log/openvpn.log

Answer 1

[Сергей]

Поставьте параметр verb
Например
verb 5
И потом смотрите в логах. Мусора много будет, зато увидете где косяк

Answer 2

[verified]

@bk0011m

До этого стояло verb 3, случайно выпало из логов. Поставил verb 5, ниже лог messages.

Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2440]: OpenVPN 2.3.2 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Sep 12 2013
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2440]: PLUGIN_INIT: POST /usr/lib64/openvpn-auth-pam.so '[/usr/lib64/openvpn-auth-pam.so] [/etc/pam.d/login]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2440]: PLUGIN_INIT: POST /usr/lib64/openvpn-auth-pam.so '[/usr/lib64/openvpn-auth-pam.so] [/etc/pam.d/login]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2440]: Diffie-Hellman initialized with 1024 bit key
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2440]: WARNING: POTENTIALLY DANGEROUS OPTION --client-cert-not-required may accept clients which do not present a certificate
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2440]: WARNING: file '/etc/openvpn/easy-rsa/2.0/keys/server.key' is group or others accessible
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2440]: Socket Buffers: R=[124928->131072] S=[124928->131072]
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2440]: ROUTE_GATEWAY 10.0.20.227/255.255.0.0 IFACE=eth0 HWADDR=fa:16:3e:78:75:57
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2440]: TUN/TAP device tun0 opened
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2440]: TUN/TAP TX queue length set to 100
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2440]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 kernel: tun0: Disabled Privacy Extensions
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2440]: /sbin/ip link set dev tun0 up mtu 1500
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2440]: /sbin/ip addr add dev tun0 local 10.2.3.1 peer 10.2.3.2
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2440]: /sbin/ip route add 10.2.3.0/24 via 10.2.3.2
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2449]: UDPv4 link local (bound): [AF_INET]10.0.15.194:1194
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2449]: UDPv4 link remote: [undef]
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2449]: MULTI: multi_init called, r=256 v=256
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2449]: IFCONFIG POOL: base=10.2.3.4 size=62, ipv6=0
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2449]: Initialization Sequence Completed
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2453]: Options error: You must define TUN/TAP device (--dev)
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 openvpn[2453]: Use --help for more information.
Mar 26 12:32:19 4dfd147a-abd5-4bde-9511-00a1cc04ec56 kernel: tun1: Disabled Privacy Extensions
Mar 26 12:32:20 4dfd147a-abd5-4bde-9511-00a1cc04ec56 ntpd[1201]: Listen normally on 9 tun0 10.2.3.1 UDP 123
Mar 26 12:32:20 4dfd147a-abd5-4bde-9511-00a1cc04ec56 ntpd[1201]: Listen normally on 10 tun1 10.8.0.1 UDP 123
Mar 26 12:32:20 4dfd147a-abd5-4bde-9511-00a1cc04ec56 ntpd[1201]: peers refreshed

Comments

[Сергей]

А в этом логе что: /var/log/openvpn.log ?

[verified]

@bk0011m

Wed Mar 26 13:44:39 2014 us=343095 OpenVPN 2.3.2 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Sep 12 2013
Wed Mar 26 13:44:39 2014 us=351491 Diffie-Hellman initialized with 2048 bit key
Wed Mar 26 13:44:39 2014 us=352132 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Mar 26 13:44:39 2014 us=352199 Socket Buffers: R=[124928->131072] S=[124928->131072]
Wed Mar 26 13:44:39 2014 us=353694 ROUTE_GATEWAY 10.0.20.227/255.255.0.0 IFACE=eth0 HWADDR=fa:16:3e:78:75:57
Wed Mar 26 13:44:39 2014 us=365274 TUN/TAP device tun1 opened
Wed Mar 26 13:44:39 2014 us=365350 TUN/TAP TX queue length set to 100
Wed Mar 26 13:44:39 2014 us=365383 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Mar 26 13:44:39 2014 us=365416 /sbin/ip link set dev tun1 up mtu 1500
Wed Mar 26 13:44:39 2014 us=367595 /sbin/ip addr add dev tun1 local 10.8.0.1 peer 10.8.0.2
Wed Mar 26 13:44:39 2014 us=368815 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Wed Mar 26 13:44:39 2014 us=371098 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Mar 26 13:44:39 2014 us=377117 UDPv4 link local (bound): [undef]
Wed Mar 26 13:44:39 2014 us=377189 UDPv4 link remote: [undef]
Wed Mar 26 13:44:39 2014 us=377224 MULTI: multi_init called, r=256 v=256
Wed Mar 26 13:44:39 2014 us=377342 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Wed Mar 26 13:44:39 2014 us=377389 IFCONFIG POOL LIST
Wed Mar 26 13:44:39 2014 us=377440 Initialization Sequence Completed

Answer 3

[bit_rainbow]

попробуй убрать

user nobody
group nobody

Comments

[verified]

Тоже Failed, лог ниже

Wed Mar 26 13:44:39 2014 us=343095 OpenVPN 2.3.2 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Sep 12 2013
Wed Mar 26 13:44:39 2014 us=351491 Diffie-Hellman initialized with 2048 bit key
Wed Mar 26 13:44:39 2014 us=352132 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Mar 26 13:44:39 2014 us=352199 Socket Buffers: R=[124928->131072] S=[124928->131072]
Wed Mar 26 13:44:39 2014 us=353694 ROUTE_GATEWAY 10.0.20.227/255.255.0.0 IFACE=eth0 HWADDR=fa:16:3e:78:75:57
Wed Mar 26 13:44:39 2014 us=365274 TUN/TAP device tun1 opened
Wed Mar 26 13:44:39 2014 us=365350 TUN/TAP TX queue length set to 100
Wed Mar 26 13:44:39 2014 us=365383 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Mar 26 13:44:39 2014 us=365416 /sbin/ip link set dev tun1 up mtu 1500
Wed Mar 26 13:44:39 2014 us=367595 /sbin/ip addr add dev tun1 local 10.8.0.1 peer 10.8.0.2
Wed Mar 26 13:44:39 2014 us=368815 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Wed Mar 26 13:44:39 2014 us=371098 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Mar 26 13:44:39 2014 us=377117 UDPv4 link local (bound): [undef]
Wed Mar 26 13:44:39 2014 us=377189 UDPv4 link remote: [undef]
Wed Mar 26 13:44:39 2014 us=377224 MULTI: multi_init called, r=256 v=256
Wed Mar 26 13:44:39 2014 us=377342 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Wed Mar 26 13:44:39 2014 us=377389 IFCONFIG POOL LIST
Wed Mar 26 13:44:39 2014 us=377440 Initialization Sequence Completed

Answer 4

[Виталий Никсенкин]

вот быстрый мануал, как сделать себе VPN на VDS

Comments

[verified]

Спасибо, попробую.

Answer 5

[D1abloRUS]

В конфиге сервера попробуйте исправить dev tun на dev tun0

Answer 6

[bit_rainbow]

Рабочий конфиг