1. Store
  2. Apps
  3. Hardware
  4. Support
  5. Solutions

ClearFoundation

Forums
Welcome, Guest
OpenVPN test update available
(1 viewing) 1 Guest
Go to bottomPage: 12
TOPIC: OpenVPN test update available
#41604
OpenVPN test update available 1 Year ago  
There are a OpenVPN and User Certificates updates available.

- The User Certificates update now has the OpenVPN configuration file download available
- The OpenVPN update fixes the certificate issue

To install the update, run:

Code:

yum --enablerepo=clearos-updates-testing install app-user-certificates app-openvpn


The OpenVPN update has not been thoroughly tested, it's just in a "works for me" state at this time!
Peter Baldwin
Developer
Posts: 1571
graphgraph
User Offline Click here to see the profile of this user
The administrator has disabled public write access.
 
#41607
Re: OpenVPN test update available 1 Year ago  
Peter,
I've given it a quick installation. Logging in as a user, in the user certificates menu I get an error "Unable to locate the file: openvpn.php". Doing an" updatedb && locate openvpn.php" finds:

/usr/clearos/apps/openvpn/controllers/openvpn.php
/usr/clearos/apps/user_certificates/controllers/openvpn.php
/var/clearos/accounts/plugins/openvpn.php
/var/clearos/base/daemon/openvpn.php

Resetting the user certificates I get a 404 error for page https://127.0.0.1:18081/app/user_certificates/destroy
Nick Howitt
Platinum Boarder
Posts: 4149
graphgraph
User Offline Click here to see the profile of this user
Last Edit: 2012/05/19 15:14 By NickH.
The administrator has disabled public write access.
 
#41640
Re: OpenVPN test update available 1 Year ago  
Extactly the same scenario for me..
Rodrigo Infante
Fresh Boarder
Posts: 17
graphgraph
User Offline Click here to see the profile of this user
The administrator has disabled public write access.
 
#41642
Re: OpenVPN test update available 1 Year ago  
Creating a new user and trying to gernerate new certs i get this...
-------------
* @copyright 2012 ClearFoundation * @license www.gnu.org/copyleft/gpl.html GNU General Public License version 3 or later * @link www.clearfoundation.com/docs/developer/apps/user_certificates/ */ /////////////////////////////////////////////////////////////////////////////// // // This program is free software: you can redistribute it and/or modify // it under the terms of the GNU General Public License as published by // the Free Software Foundation, either version 3 of the License, or // (at your option) any later version. // // This program is distributed in the hope that it will be useful, // but WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU General Public License for more details. // // You should have received a copy of the GNU General Public License // along with this program. If not, see . // /////////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////////////// // Load dependencies /////////////////////////////////////////////////////////////////////////////// $this->lang->load('user_certificates'); $this->lang->load('certificate_manager'); /////////////////////////////////////////////////////////////////////////////// // Headers /////////////////////////////////////////////////////////////////////////////// $headers = array( lang('certificate_manager_certificate'), ); /////////////////////////////////////////////////////////////////////////////// // Anchors /////////////////////////////////////////////////////////////////////////////// $anchors = array(anchor_custom('/app/user_certificates/certificates/reset', lang('base_reset'))); /////////////////////////////////////////////////////////////////////////////// // Items /////////////////////////////////////////////////////////////////////////////// foreach ($certs as $basename => $title) { if (($username !== 'root') || ($basename === 'ca-cert.pem')) { $item['title'] = $title; $item['action'] = '/app/user_certificates/certificates/download/' . $basename; $item['anchors'] = button_set( array( anchor_custom('/app/user_certificates/certificates/download/' . $basename, lang('base_download')), anchor_custom('/app/user_certificates/certificates/install/' . $basename, lang('base_install')) ) ); $item['details'] = array($item['title']); $items[] = $item; } } /////////////////////////////////////////////////////////////////////////////// // Summary table /////////////////////////////////////////////////////////////////////////////// echo summary_table( lang('certificate_manager_security_certificates'), $anchors, $headers, $items );
-------------------------
An Error Was Encountered
Unable to locate the file: openvpn.php
------------------------
Rodrigo Infante
Fresh Boarder
Posts: 17
graphgraph
User Offline Click here to see the profile of this user
The administrator has disabled public write access.
 
#41643
Re: OpenVPN test update available 1 Year ago  
My clear 6 is actually on production, so i had to roll back in order to create certificates for new users..

yum --enablerepo=clearos-updates-testing erase app-user-certificates app-openvpn

yum --enablerepo=clearos-updates-testing reinstall app-user-certificates

Rodrigo Infante
Fresh Boarder
Posts: 17
graphgraph
User Offline Click here to see the profile of this user
The administrator has disabled public write access.
 
#41644
Re: OpenVPN test update available 1 Year ago  
I am also having this issue, completely white interface and I can't destroy and re-create certificates as I get a 404.

I will test to see if the certificates work regardless though.

*edit*

No joy what so ever, it's like the openvpn isn't even trying to connect to the server, but maybe this is due to certificates as telneting to the tcp 1194 works fine and I get a response for the server but I do not with using openvpn on network-manager on my ubuntu or on my windows 7 machine.

Error output from /var/log/system on my ubuntu is:
Code:


May 21 16:16:16 kratos NetworkManager[13778]: <info> Starting VPN service 'openvpn'...
May 21 16:16:16 kratos NetworkManager[13778]: <info> VPN service 'openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 14714
May 21 16:16:16 kratos NetworkManager[13778]: <info> VPN service 'openvpn' appeared; activating connections
May 21 16:16:16 kratos NetworkManager[13778]: <info> VPN plugin state changed: init (1)
May 21 16:16:17 kratos NetworkManager[13778]: <info> VPN plugin state changed: starting (3)
May 21 16:16:17 kratos NetworkManager[13778]: <info> VPN connection 'testvpn' (Connect) reply received.
May 21 16:16:17 kratos nm-openvpn[14720]: OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Mar 30 2012
May 21 16:16:17 kratos nm-openvpn[14720]: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
May 21 16:16:17 kratos nm-openvpn[14720]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May 21 16:16:17 kratos nm-openvpn[14720]: Cannot load private key file /home/james/Downloads/client-ctsupport-key.pem: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
May 21 16:16:17 kratos nm-openvpn[14720]: Error: private key password verification failed
May 21 16:16:17 kratos nm-openvpn[14720]: Exiting
May 21 16:16:17 kratos NetworkManager[13778]: <warn> VPN plugin failed: 1
May 21 16:16:17 kratos NetworkManager[13778]: <info> VPN plugin state changed: stopped (6)
May 21 16:16:17 kratos NetworkManager[13778]: <info> VPN plugin state change reason: 0
May 21 16:16:17 kratos NetworkManager[13778]: <warn> error disconnecting VPN: Could not process the request because no VPN connection was active.
May 21 16:16:17 kratos NetworkManager[13778]: <info> Policy set 'Wired connection 1' (eth0) as default for IPv4 routing and DNS.
May 21 16:16:23 kratos NetworkManager[13778]: <info> VPN service 'openvpn' disappeared

James Joseph
Expert Boarder
Posts: 155
graphgraph
User Offline Click here to see the profile of this user
Last Edit: 2012/05/21 11:16 By chomes.
The administrator has disabled public write access.
 
#41725
Re: OpenVPN test update available 1 Year ago  
Sorry about that - I neglected to add a file (openvpn.php) to the source code system before I sent the app off to the build system. This time around, I verified the package produced from the build system and all is well:

Code:

yum --enablerepo=clearos-updates-testing install app-user-certificates app-openvpn



There's also support for TCP connections if you run into UDP problems. UDP issues crop up with some NAT routers and multi-WAN.

PS If you have created certificates with a pre-release version (beta, RC), then you may need to reset these. Sorry.
Peter Baldwin
Developer
Posts: 1571
graphgraph
User Offline Click here to see the profile of this user
The administrator has disabled public write access.
 
#41760
Re: OpenVPN test update available 1 Year ago  
Peter, that works perfectly, good to know the basic clearos is back to working the way it should do, out of the box, two things on this:

1. Before you said you would do site to site openvpn is this still going under way?
2. Will you be releasing these updates under your normal repos in the near future?
James Joseph
Expert Boarder
Posts: 155
graphgraph
User Offline Click here to see the profile of this user
The administrator has disabled public write access.
 
#41806
Re:OpenVPN test update available 12 Months ago  
Maybe I am wrong and you do not consider version 6.2 a final and stable release (as I thought you did), but how do you consider a release where open vpn is still on tests and adjustments, a mail server is missing and the documentation refers to version 5.2 that is very different?
Agostinho Matos
Fresh Boarder
Posts: 3
graphgraph
User Offline Click here to see the profile of this user
The administrator has disabled public write access.
 
#41809
Re:OpenVPN test update available 12 Months ago  
Agostina,
Granted this didn't came with bugs at first however they could've postponed this even longer by making sure everything was in there, people would complain. they release it now, they had bugs and it only took a week to fix people still complain. No matter what they do people will complain it's unavoidable.

To be fair Centos 6 has been released for some time now and their Documentation isn't up to date either (still waiting for ldap documentation).

They're doing the best they can with what they got, I honestly thought this was going to come out much later then it is now but they were nice enough to release it now. I know it's not perfect but nothing ever is. If you feel so adamant about the documentation why don't you help with it and add information yourself I believe users can contribute to it (I think I'm not too sure).

*edit* To fix things one-two weeks after a release is much quicker compared to some of the stuff MS have pulled off and still haven't fixed/claim it's even a fault.
James Joseph
Expert Boarder
Posts: 155
graphgraph
User Offline Click here to see the profile of this user
Last Edit: 2012/05/25 10:44 By chomes.
The administrator has disabled public write access.
 
Go to topPage: 12
  get the latest posts directly to your desktop