maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Applications (https://talk.maemo.org/forumdisplay.php?f=41)
-   -   VPN suggestions (https://talk.maemo.org/showthread.php?t=32800)

allnameswereout 2009-10-19 05:29

Re: VPN suggestions
 
Hmm, I think you get this error because you don't have Bash installed which the script requires, and Busybox /bin/sh is not compatible with Bash scripts.

Therefore you must install Bash from Application Manager.

After installed, from x-term execute:

$ whereis bash

Now you know where bash is located (probably either /bin/bash or /usr/bin/bash ...) now edit /etc/openvpn/update-resolv-conf and make sure on top to replace whatever it says to

#!/path/to/bash

Where /path/to/bash is what whereis told you.

PS: Whatever was the result of the host and ping commands?

icbolsh 2009-10-19 06:06

Re: VPN suggestions
 
Quote:

Originally Posted by allnameswereout (Post 350920)
Hmm, I think you get this error because you don't have Bash installed which the script requires, and Busybox /bin/sh is not compatible with Bash scripts.

Therefore you must install Bash from Application Manager.

After installed, from x-term execute:

$ whereis bash

Now you know where bash is located (probably either /bin/bash or /usr/bin/bash ...) now edit /etc/openvpn/update-resolv-conf and make sure on top to replace whatever it says to

#!/path/to/bash

Where /path/to/bash is what whereis told you.

PS: Whatever was the result of the host and ping commands?

I installed bash, but the the whereis command comes up empty. I even went into root and did whereis bash. They both say "not found"

allnameswereout 2009-10-19 06:13

Re: VPN suggestions
 
Quote:

Originally Posted by icbolsh (Post 350932)
I installed bash, but the the whereis command comes up empty. I even went into root and did whereis bash. They both say "not found"

Try this

$ ls -l /bin/bash* /usr/bin/bash* /usr/local/bin/bash*

or

$ dpkg -L bash | grep bin/

icbolsh 2009-10-19 06:27

Re: VPN suggestions
 
using "$ dpkg -L bash | grep bin/ " it listed /usr/bin/bash-setup. So is /usr/bin the path. I cd to the location then did "ls bash" and it still said "no such file or directory".

TA-t3 2009-10-19 09:28

Re: VPN suggestions
 
bash-setup is probably a post-installation script. Sounds like a strange way to set up a debian package. Someone who is familiar with this package will have to tell you how to fix that. It could be as simple as entering /usr/bin/bash-setup and see what it does. But on your own risk.

icbolsh 2009-10-20 00:15

Re: VPN suggestions
 
Hey mikkov,
Any chance you might know why I can view Jaiku but not twitter in my Ivacy config in openvpn? It was working, but then I tethered to my cell and it stopped working. Now I'm back on wifi and it still won't work but Jaiku does.

mikkov 2009-10-20 11:22

Re: VPN suggestions
 
Well, it's really hard to say. But it seems that the twitter ip you had is in Beijing so, so it's probably a dns issue as others have said.

Latest openvpn package for maemo comes with it's own update-resolv-conf. You could try the following config. Note that I have no idea if it works or not.


client
dev tun
proto udp
remote openvpn.ivacy.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ns-cert-type server
comp-lzo
verb 3
auth-user-pass
script-security 3
reneg-sec 0
redirect-gateway def1
up /etc/openvpn/maemo-update-resolvconf
plugin /usr/lib/openvpn/openvpn-down-root.so "script_type=down /etc/openvpn/maemo-update-resolvconf"
ca ivacy-ca.crt
cert ivacy-client.crt
key ivacy-client.key
tls-auth ivacy-tls.key 1

icbolsh 2009-10-21 00:07

Re: VPN suggestions
 
when importing the config file it says "Files not found: /etc/openvpn/maemo-update-resolvconf" . Am I missing that file? Do I just need to get that file and upload it?

It 's not working. here is the test log:
Wed Oct 21 08:00:26 2009 OpenVPN 2.1_rc19 arm-unknown-linux-gnueabi [SSL] [LZO2] [EPOLL] built on Sep 7 2009
Enter Auth Username:Enter Auth Password:Wed Oct 21 08:00:26 2009 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Oct 21 08:00:26 2009 PLUGIN_INIT: POST /usr/lib/openvpn/openvpn-down-root.so '[/usr/lib/openvpn/openvpn-down-root.so] [script_type=down] [/etc/openvpn/maemo-update-resolvconf]' intercepted=PLUGIN_UP|PLUGIN_DOWN
Wed Oct 21 08:00:26 2009 /usr/bin/openssl-vulnkey -q -b 2048 -m <modulus omitted>
Wed Oct 21 08:00:26 2009 ******* WARNING *******: '(null)' is a known vulnerable key. See 'man openvpn-vulnkey' for details.
Wed Oct 21 08:00:26 2009 WARNING: file 'ivacy-tls.key' is group or others accessible
Wed Oct 21 08:00:26 2009 Control Channel Authentication: using 'ivacy-tls.key' as a OpenVPN static key file
Wed Oct 21 08:00:26 2009 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 21 08:00:26 2009 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 21 08:00:26 2009 LZO compression initialized
Wed Oct 21 08:00:26 2009 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Wed Oct 21 08:00:27 2009 RESOLVE: NOTE: openvpn.ivacy.com resolves to 3 addresses, choosing one by random
Wed Oct 21 08:00:27 2009 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Oct 21 08:00:27 2009 Local Options hash (VER=V4): '504e774e'
Wed Oct 21 08:00:27 2009 Expected Remote Options hash (VER=V4): '14168603'
Wed Oct 21 08:00:27 2009 Socket Buffers: R=[105472->131072] S=[105472->131072]
Wed Oct 21 08:00:27 2009 UDPv4 link local: [undef]
Wed Oct 21 08:00:27 2009 UDPv4 link remote: 85.249.223.29:1194
Wed Oct 21 08:00:27 2009 TLS: Initial packet from 85.249.223.29:1194, sid=787482eb 0030aab8
Wed Oct 21 08:00:27 2009 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Oct 21 08:00:32 2009 VERIFY OK: depth=1, /C=RU/ST=MR/L=Moscow/O=ivacy.com/CN=ivacy.com_CA/emailAddress=admin@ivacy.com
Wed Oct 21 08:00:32 2009 VERIFY OK: nsCertType=SERVER
Wed Oct 21 08:00:32 2009 VERIFY OK: depth=0, /C=RU/ST=MR/L=Moscow/O=ivacy.com/CN=openvpn.ivacy.com/emailAddress=admin@ivacy.com
Wed Oct 21 08:00:39 2009 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Oct 21 08:00:39 2009 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 21 08:00:39 2009 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Oct 21 08:00:39 2009 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 21 08:00:39 2009 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Oct 21 08:00:39 2009 [openvpn.ivacy.com] Peer Connection Initiated with 85.249.223.29:1194
Wed Oct 21 08:00:40 2009 SENT CONTROL [openvpn.ivacy.com]: 'PUSH_REQUEST' (status=1)
Wed Oct 21 08:00:40 2009 PUSH: Received control message: 'PUSH_REPLY,route 1.0.0.0 255.0.0.0,dhcp-option DNS 1.254.2.2,dhcp-option DNS 1.254.2.3,dhcp-option DOMAIN vpn,explicit-exit-notify 2,route-gateway 1.2.116.1,topology subnet,ping 10,ping-restart 60,ifconfig 1.2.116.119 255.255.252.0'
Wed Oct 21 08:00:40 2009 OPTIONS IMPORT: timers and/or timeouts modified
Wed Oct 21 08:00:40 2009 OPTIONS IMPORT: explicit notify parm(s) modified
Wed Oct 21 08:00:40 2009 OPTIONS IMPORT: --ifconfig/up options modified
Wed Oct 21 08:00:40 2009 OPTIONS IMPORT: route options modified
Wed Oct 21 08:00:40 2009 OPTIONS IMPORT: route-related options modified
Wed Oct 21 08:00:40 2009 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Oct 21 08:00:40 2009 ROUTE default_gateway=192.168.15.1
Wed Oct 21 08:00:40 2009 TUN/TAP device tun0 opened
Wed Oct 21 08:00:40 2009 TUN/TAP TX queue length set to 100
Wed Oct 21 08:00:40 2009 /sbin/ifconfig tun0 1.2.116.119 netmask 255.255.252.0 mtu 1500 broadcast 1.2.119.255
Wed Oct 21 08:00:41 2009 PLUGIN_CALL: POST /usr/lib/openvpn/openvpn-down-root.so/PLUGIN_UP status=0
Wed Oct 21 08:00:41 2009 /etc/openvpn/maemo-update-resolvconf tun0 1500 1542 1.2.116.119 255.255.252.0 init
Wed Oct 21 08:00:41 2009 script failed: could not execute external program
Wed Oct 21 08:00:41 2009 Exiting

kot2adm 2009-10-21 06:06

Re: VPN suggestions
 
HI all!
I think it's necessary to post wiki page about openvpn setup.
I have the same problems with openvpn setup.
My question Is it necessary to use option "auth-user-pass" with openvpn desktop applet?

kot2adm 2009-10-21 09:36

Re: VPN suggestions
 
Forget my previous post. Option "askpass" works well for me.


All times are GMT. The time now is 00:26.

vBulletin® Version 3.8.8