Ar750s 3.100 openvpn failed load ovpn

ThH · 2020-02-12T19:11:05.263Z

Have you tried the oven file with a different client? The times my upload failed it was because of incorrect or incompatible options.

elessargr · 2020-02-12T19:53:04.830Z

yes the same file I use it on laptop, android, iphone and ipad

alzhao · 2020-02-13T02:38:36.781Z

Can you give the detailed error with a screenshot?

What is the error in deed?

elessargr · 2020-02-13T17:35:00.069Z

I think its a very nice simple messaged

failed1920×979 67.7 KB

michal0078 · 2020-02-13T19:29:54.325Z

your vpn is invalid, no certificate keys (empty).

Johnex · 2020-02-13T19:31:08.883Z

He removed them before pasting the config here. You should never put your certificates or keys online, unless they are just a test and self signed.

ThH · 2020-02-13T21:05:32.909Z

Don`t you have cert and key in this config as I only see the ca and the tls in your config.

Johnex · 2020-02-13T21:50:57.026Z

No. There are 2 main ways to set up OpenVPN. The usual Certificates + Keys, or using a Pre-Shared Static Key.
He is using the second, so you only need a key file to connect. It is simpler, but the key must be transfered via a USB stick or some other secure protocol.

You can read here:

OpenVPN

Community Resources | OpenVPN

Here you will find documentation, resources, and articles for the OpenVPN open source community.

On the other hand, it seems like the OP does not understand how that works, and should follow the guide i linked for a proper configuration. He has mixed both methods into one.

ThH · 2020-02-13T22:05:01.264Z

Johnex:

He has mixed both methods into one.

Maybe that confused me and the fact that I only used Certificates and Keys so far. Thanks for clarifying.

alzhao · 2020-02-14T03:14:39.518Z

The router cannot find any valid config in your uploading.

Can you tell me what did you upload? A Zip? What is inside? Especially the file names.

If still cannot tell you may need to send me the zip to check directly.

elessargr · 2020-02-14T05:30:23.269Z

@ Johnex
I will check it in the evening.
As I said before I use the same file on 4+devices (android, iPhone, iPad, windows) and don’t have any issue.
Maybe the devs can add more information for the error that occurs or/and have a debug feature on the admin portal.

elessargr · 2020-02-14T16:53:37.743Z

I lost you on the last part that I mixed up the two methods.
Actually this .ovpn file is automatically generated from openvpn-client-export on a pfsense fw.

I tried also on firmware version 3.025 but again it failed.

Johnex · 2020-02-14T18:38:50.160Z

The opvn file uploader in the GL UI is pretty strict, it was made to support most of the popular VPN services and configurations. If it finds conflicting “features”, it will not upload anything as it does not know what to do, but it will still work in openvpn when loading the config.

So either you can try to find what line in the ovpn file is causing the upload to fail, or you can load the config manually via SSH to openvpn You can also use the OpenVPN UI inside Luci (Advanced menu) after installing the luci-app-openvpn package.

elessargr · 2020-02-15T10:59:31.164Z

@alzhao Its a ovpn file. What is inside is what I pasted on the original post.

@Johnex Thank man for the help! Unfortunately I tried to go with the openvpn UI inside the luci advance portal and got to another issue

ar750s-broken-after-openwrt-upgrade

I was checking also via ssh to the folders of the router if there is somewhere a .config/.ovpn to manually load mine but didn’t find something at that time.

elessargr · 2020-02-15T15:33:15.143Z

@Johnex you saved the day on the other thread literally I did the same this multiple time.
anyhow

root@R2-D2:/# find . -name openvpn
./etc/config/openvpn
./etc/init.d/openvpn
./etc/openvpn
./lib/upgrade/keep.d/openvpn
./overlay/upper/etc/openvpn
./overlay/upper/etc/config/openvpn
./overlay/upper/usr/lib/lua/luci/view/openvpn
./rom/etc/config/openvpn
./rom/etc/init.d/openvpn
./rom/etc/openvpn
./rom/lib/upgrade/keep.d/openvpn
./rom/usr/sbin/openvpn
./rom/usr/share/openvpn
./usr/lib/lua/luci/view/openvpn
./usr/sbin/openvpn
./usr/share/openvpn

ovpn_luci1192×672 48.1 KB

I uploaded to etc/openvpn the .ovpn file and created also a copy as .config
then I edited the /etc/config/openvpn to match the example it had as “custom_config”

root@R2-D2:/# cat ./etc/config/openvpn
package openvpn

#################################################

Sample to include a custom config file.

#################################################

config openvpn custom_config
    # Set to 1 to enable this instance:
    option enabled 0

    # Include OpenVPN configuration
    option config /etc/openvpn/my-vpn.conf
config openvpn myovpntest
    # Set to 1 to enable this instance:
    option enabled 0

    # Include OpenVPN configuration
    option config /etc/openvpn/myovpntest.conf

and rebooted the router.
Unfortunately nothing. Any guidance on this?

Johnex · 2020-02-15T15:42:47.741Z

Give this a try? I haven’t tested it since i usually only use the Cert+Key “default” way of VPNing:

OpenWrt Wiki – 30 Aug 19

OpenVPN client using LuCI

OpenVPN client using LuCI Introduction * This guide describes how install and operate the OpenVPN client using LuCI web interface. * You can use it to connect to your own OpenVPN server or a commercial OpenVPN provider. * Follow OpenVPN basic...

Johnex · 2020-02-15T15:48:20.922Z

Just to add, why are you not using Wireguard? OpenVPN is old, slow. You will get better performance on your AR750s, 80mbit+ vs 20mbit on OpenVPN.

elessargr · 2020-02-15T16:05:48.757Z

hooray!

ovpn_luci21195×851 49.4 KB

managed to load the 19.07 version and indeed the ovpn options is available there.
Also managed to load the ovpn file (sidenote the instance name does NOT have to contain any dots)
Tried to start it and now:

Sat Feb 15 15:55:26 2020 daemon.err uhttpd[1288]: sh: /etc/init.d/openvpn: not found

hehe…I have to find also the way to activate the luci back since this is a clear openwrt installation.

I am not using wireguard because I read some articles that is still in the beta phase and not fully approved yet. Yes its faster and way easier to implement but not yet fully ready apparently.

Edit:
For the issue above “sh: /etc/init.d/openvpn: not found” I needed to install openvpn-openssl
I realized that the luci I was referring to is not actually the GUI of glinet which I had before and thought that this was it.
Do we know if I can add this again on-top of the new firmware?
Because now the 192.168.8.1 url its blank.

Johnex · 2020-02-15T16:33:59.530Z

I would recommend you go back to the GL firmware, latest testing version, openwrt-ar750s-3.101-0212.img, from here:

https://dl.gl-inet.com/firmware/ar750s/testing/

The img file is used in uBoot, the tar file is used in the GL UI upgrade page.

You can access Luci from the GL UI menu, More Settings → Advanced.

I still recommend you switch to wireguard for all your devices, but do what you did again using the GL firmware.

elessargr · 2020-02-16T05:39:58.488Z

So to give an update here:
I tried the testing version 3.101 and I had issues with the internet. The connections was unstable and was dropping multiple times. I had to relogin/auth to the wifi of the hotel more than 4 times in the time window of 30 mins. Anyway; I did go back to 3.100 to be stable.

Now the SOLUTION:

persist-tun
persist-key
cipher AES-256-CBC
ncp-ciphers AES-256-GCM:AES-128-GCM
auth SHA256
tls-client
client
remote xxxx1.com
remote xxxx2.com
remote xxxx3.com
auth-user-pass
dev tun0      <======================================
remote-cert-tls server
<ca>
-----BEGIN CERTIFICATE-----
XXXXXXXXXXXXXXXXXXXXXXX
-----END CERTIFICATE-----
</ca>
setenv CLIENT_CERT 0
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
XXXXXXXXXXXXXXXXXXXXXXXXXXX
-----END OpenVPN Static key V1-----
</tls-auth>
key-direction 1

From the original config what was missing causing the failed message was actually one line.
“dev tun0”
I was able to find this when I was troubleshooting on the 19.07 openwrt version and I was seeing the error messages on the system logs.

Maybe the developers can add a debug window that shows all the error messages and not just “failed”

Thank you everyone for your help!