:::: PiVPN debug :::: ============================================= :::: Latest commit :::: Branch: master Commit: 4e4d608b35255680eb1545bfb5555c5b74411b31 Author: wlmchen Date: Sun Jul 28 17:29:36 2024 -0700 Summary: Fix Alpine persistence ============================================= :::: Installation settings :::: PLAT=Ubuntu OSCN=noble USING_UFW=0 pivpnforceipv6route=1 IPv4dev=eth0 install_user=pivpn install_home=/home/pivpn VPN=openvpn pivpnPROTO=udp pivpnPORT=1195 pivpnDNS1=10.0.1.1 pivpnDNS2=10.0.1.2 pivpnSEARCHDOMAIN= pivpnHOST=REDACTED TWO_POINT_FOUR=1 pivpnENCRYPT=256 USE_PREDEFINED_DH_PARAM=0 INPUT_CHAIN_EDITED=0 FORWARD_CHAIN_EDITED=0 INPUT_CHAIN_EDITEDv6= FORWARD_CHAIN_EDITEDv6= pivpnDEV=tun0 pivpnNET=10.176.42.0 subnetClass=24 pivpnenableipv6=0 ALLOWED_IPS="" UNATTUPG=1 INSTALLED_PACKAGES=(openvpn) HELP_SHOWN=1 ============================================= :::: Server configuration shown below :::: dev tun proto udp port 1195 ca /etc/openvpn/easy-rsa/pki/ca.crt cert /etc/openvpn/easy-rsa/pki/issued/pivpn_66a8aee2-15ea-45d5-9539-38500c372ddc.crt key /etc/openvpn/easy-rsa/pki/private/pivpn_66a8aee2-15ea-45d5-9539-38500c372ddc.key dh none ecdh-curve prime256v1 topology subnet server 10.176.42.0 255.255.255.0 # Set your primary domain name server address for clients push "dhcp-option DNS 10.0.1.1" push "dhcp-option DNS 10.0.1.2" # Prevent DNS leaks on Windows push "block-outside-dns" # Override the Client default gateway by using 0.0.0.0/1 and # 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of # overriding but not wiping out the original default gateway. push "redirect-gateway def1" client-to-client client-config-dir /etc/openvpn/ccd keepalive 15 120 remote-cert-tls client tls-version-min 1.2 tls-crypt /etc/openvpn/easy-rsa/pki/ta.key cipher AES-256-CBC auth SHA256 user openvpn group openvpn persist-key persist-tun crl-verify /etc/openvpn/crl.pem status /var/log/openvpn-status.log 20 status-version 3 syslog verb 3 #DuplicateCNs allow access control on a less-granular, per user basis. #Remove # if you will manage access by user instead of device. #duplicate-cn # Generated for use by PiVPN.io ============================================= :::: Client template file shown below :::: client dev tun proto udp remote REDACTED 1195 resolv-retry infinite nobind remote-cert-tls server tls-version-min 1.2 verify-x509-name pivpn_66a8aee2-15ea-45d5-9539-38500c372ddc name cipher AES-256-CBC auth SHA256 auth-nocache verb 3 ============================================= :::: Recursive list of files in :::: ::: /etc/openvpn/easy-rsa/pki shows below ::: /etc/openvpn/easy-rsa/pki/: MyPhone.ovpn Default.txt ca.crt crl.pem index.txt index.txt.attr index.txt.attr.old index.txt.old issued openssl-easyrsa.cnf private revoked safessl-easyrsa.cnf serial serial.old ta.key vars vars.example /etc/openvpn/easy-rsa/pki/issued: MyPhone.crt pivpn_66a8aee2-15ea-45d5-9539-38500c372ddc.crt /etc/openvpn/easy-rsa/pki/private: MyPhone.key ca.key pivpn_66a8aee2-15ea-45d5-9539-38500c372ddc.key /etc/openvpn/easy-rsa/pki/revoked: private_by_serial reqs_by_serial /etc/openvpn/easy-rsa/pki/revoked/private_by_serial: /etc/openvpn/easy-rsa/pki/revoked/reqs_by_serial: ============================================= :::: Self check :::: :: [OK] IP forwarding is enabled :: [OK] Iptables MASQUERADE rule set :: [OK] OpenVPN is running :: [OK] OpenVPN is enabled (it will automatically start on reboot) :: [OK] OpenVPN is listening on port 1195/udp ============================================= :::: Having trouble connecting? Take a look at the FAQ: :::: https://docs.pivpn.io/faq ============================================= :::: Snippet of the server log :::: 2024-09-19T08:42:18.495360-07:00 pivpn ovpn-server[775]: library versions: OpenSSL 3.0.13 30 Jan 2024, LZO 2.10 2024-09-19T08:42:18.495420-07:00 pivpn ovpn-server[775]: DCO version: N/A 2024-09-19T08:42:18.495460-07:00 pivpn ovpn-server[775]: net_route_v4_best_gw query: dst REDACTED 2024-09-19T08:42:18.495496-07:00 pivpn ovpn-server[775]: net_route_v4_best_gw result: via REDACTED dev 2024-09-19T08:42:18.495607-07:00 pivpn ovpn-server[775]: CRL: loaded 1 CRLs from file /etc/openvpn/crl.pem 2024-09-19T08:42:18.495643-07:00 pivpn ovpn-server[775]: WARNING: OpenSSL 3.0+ builds do not support specifying an ECDH curve with --ecdh-curve, using default curves. Use --tls-groups to specify groups. 2024-09-19T08:42:18.493929-07:00 pivpn ovpn-server[775]: TUN/TAP device tun0 opened 2024-09-19T08:42:18.494059-07:00 pivpn ovpn-server[775]: net_iface_mtu_set: mtu 1500 for tun0 2024-09-19T08:42:18.494176-07:00 pivpn ovpn-server[775]: net_iface_up: set tun0 up 2024-09-19T08:42:18.494606-07:00 pivpn ovpn-server[775]: net_addr_v4_add: 10.176.42.1/24 dev tun0 2024-09-19T08:42:18.498742-07:00 pivpn ovpn-server[775]: Could not determine IPv4/IPv6 protocol. Using AF_INET 2024-09-19T08:42:18.499666-07:00 pivpn ovpn-server[775]: Socket Buffers: R=[212992->212992] S=[212992->212992] 2024-09-19T08:42:18.499886-07:00 pivpn ovpn-server[775]: UDPv4 link local (bound): [AF_INET][undef]:1195 2024-09-19T08:42:18.504241-07:00 pivpn ovpn-server[775]: UDPv4 link remote: [AF_UNSPEC] 2024-09-19T08:42:18.505568-07:00 pivpn ovpn-server[775]: UID set to openvpn 2024-09-19T08:42:18.505930-07:00 pivpn ovpn-server[775]: GID set to openvpn 2024-09-19T08:42:18.506160-07:00 pivpn ovpn-server[775]: Capabilities retained: CAP_NET_ADMIN 2024-09-19T08:42:18.506308-07:00 pivpn ovpn-server[775]: MULTI: multi_init called, r=256 v=256 2024-09-19T08:42:18.506454-07:00 pivpn ovpn-server[775]: IFCONFIG POOL IPv4: base=10.176.42.2 size=253 2024-09-19T08:42:18.506595-07:00 pivpn ovpn-server[775]: Initialization Sequence Completed ============================================= :::: Debug complete ::::