OpenWrt Forum Archive

Topic: help with openvpn

The content of this topic has been archived on 3 May 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hello all

I have been trying to install openvpn using these instructions: wiki.openwrt.org/doc/howto/openvpn-streamlined-server-setup

I have everything else set but I don't know how to encrypt the keys. I'm mediocre with computers and it seems useless with Linux. It seems GnuPG without any other instructions is just too difficult for me.

I would really appreciate any help.

If there is any use, I get this error when trying to start the server:

Wed Feb  7 22:32:59 2018 us=705566 OpenVPN 2.4.4 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
Wed Feb  7 22:32:59 2018 us=705876 library versions: OpenSSL 1.0.2n  7 Dec 2017, LZO 2.10
Wed Feb  7 22:32:59 2018 us=709827 Diffie-Hellman initialized with 2048 bit key
Wed Feb  7 22:32:59 2018 us=710485 No valid translation found for TLS cipher '!aNULL'
Wed Feb  7 22:32:59 2018 us=710837 No valid translation found for TLS cipher '!eNULL'
Wed Feb  7 22:32:59 2018 us=711271 No valid translation found for TLS cipher '!3DES'
Wed Feb  7 22:32:59 2018 us=711606 No valid translation found for TLS cipher '!MD5'
Wed Feb  7 22:32:59 2018 us=711936 No valid translation found for TLS cipher '!SHA'
Wed Feb  7 22:32:59 2018 us=712361 No valid translation found for TLS cipher '!PSK'
Wed Feb  7 22:32:59 2018 us=712816 No valid translation found for TLS cipher '!DSS'
Wed Feb  7 22:32:59 2018 us=713150 No valid translation found for TLS cipher '!RC4'
Wed Feb  7 22:32:59 2018 us=727817 neither stdin nor stderr are a tty device and you have neither a controlling tty nor systemd - can't ask for 'Enter Private Key Password:'.  If you used --daemon, you need to use --askpass to make passphrase-protected keys work, and you can not use --auth-nocache.
Wed Feb  7 22:32:59 2018 us=728101 Exiting due to fatal error

It appears you have set a password on your server certificate private key.  I'm not sure how to configure for that, if it is possible.  Remove the password or create a new cert / key pair.

Thank you mk24. That was it (and it was also in the instructions) and the server is now running. I will try to connect to it later today and we will see if its working.

There was quite a bit of typos on those command lines. If I get this working how should I contact to get those corrected?

The discussion might have continued from here.