[sagher]

Hello experts.
After a successful installation of OpenVPN by given link
Install Openvpn

I got error at the end while start services.
with this command:

Code: (Select All)

sudo systemctl start openvpn@server

output: 

Job for [email protected] failed. See 'systemctl status [email protected]' and 'journalctl -xn' for details.


root@xxxxxxxxxx:~# systemctl status [email protected]
● [email protected] - OpenVPN connection to server
   Loaded: loaded (/lib/systemd/system/[email protected]; disabled)
   Active: failed (Result: exit-code) since Thu 2019-04-11 04:28:31 EDT; 14s ago
     Docs: man:openvpn(8)
           https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage
           https://community.openvpn.net/openvpn/wiki/HOWTO
  Process: 29871 ExecStart=/usr/sbin/openvpn --daemon ovpn-%i --status /run/open      vpn/%i.status 10 --cd /etc/openvpn --config /etc/openvpn/%i.conf --writepid /run      /openvpn/%i.pid (code=exited, status=1/FAILURE)

Apr 11 04:28:31 Post2Host-LosAngeles ovpn-server[29871]: OpenVPN 2.4.0 x86_64...
Apr 11 04:28:31 Post2Host-LosAngeles systemd[1]: [email protected]: con...1
Apr 11 04:28:31 Post2Host-LosAngeles systemd[1]: Failed to start OpenVPN con....
Apr 11 04:28:31 Post2Host-LosAngeles systemd[1]: Unit [email protected]....
Hint: Some lines were ellipsized, use -l to show in full.

[Mashiro]

Would be great to get the full log instead of one with lines that are cut off at the end.

Code: (Select All)

sudo journalctl -xn -l

^ Should provide the log without cut off lines. With the current log there is nothing we can do because the message is exactly cut of where it would go on with saying that exactly failed.

You can also redirect the whole output into a text file.

Code: (Select All)

sudo journalctl -xn -l > journalctl.log

[sagher]

Code: (Select All)

root@xxxxxxxx:~# sudo journalctl -xn -l > journalctl.log
root@xxxxxxxxx:~# journalctl -xn -l
-- Logs begin at Sat 2019-03-16 13:06:48 EDT, end at Thu 2019-04-11 05:29:12 EDT. --
Apr 11 05:27:35 xxxxxxxxx sudo[16365]: root : TTY=pts/1 ; PWD=/root ; USER
Apr 11 05:27:35 xxxxxxxxx sudo[16365]: pam_unix(sudo:session): session ope
Apr 11 05:28:16 xxxxxxxxx sudo[16581]: root : TTY=pts/1 ; PWD=/root ; USER
Apr 11 05:28:16 xxxxxxxxx sudo[16581]: pam_unix(sudo:session): session ope
Apr 11 05:28:16 xxxxxxxxx sudo[16581]: pam_unix(sudo:session): session clo
Apr 11 05:29:10 Pxxxxxxxx sshd[16865]: Accepted password for root from 39.
Apr 11 05:29:10 Pxxxxxxxx sshd[16865]: pam_unix(sshd:session): session ope
Apr 11 05:29:12 Pxxxxxxxx postfix/smtpd[16886]: connect from unknown[185.2
Apr 11 05:29:12 xxxxxxxxx postfix/smtpd[16886]: lost connection after AUTH
Apr 11 05:29:12 Pxxxxxxxx postfix/smtpd[16886]: disconnect from unknown[18
lines 1-11/11 (END)...skipping...
-- Logs begin at Sat 2019-03-16 13:06:48 EDT, end at Thu 2019-04-11 05:29:12 EDT. --
Apr 11 05:27:35 xxxxx sudo[16365]: root : TTY=pts/1 ; PWD=/root ; USER=root ; COMMAND=/bin/journalctl -xn -l
Apr 11 05:27:35 xxxxx sudo[16365]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Apr 11 05:28:16 xxxxx sudo[16581]: root : TTY=pts/1 ; PWD=/root ; USER=root ; COMMAND=/bin/journalctl -xn -l
Apr 11 05:28:16 xxxxx sudo[16581]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Apr 11 05:28:16 xxxxx sudo[16581]: pam_unix(sudo:session): session closed for user root
Apr 11 05:29:10 xxxxx sshd[16865]: Accepted password for root from 39.40.178.33 port 50292 ssh2
Apr 11 05:29:10 xxxxx sshd[16865]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 11 05:29:12 xxxxx postfix/smtpd[16886]: connect from unknown[185.234.216.92]
Apr 11 05:29:12 xxxxx postfix/smtpd[16886]: lost connection after AUTH from unknown[185.234.216.92]
Apr 11 05:29:12 xxxxx postfix/smtpd[16886]: disconnect from unknown[185.234.216.92]

[Mashiro]

The messages are still cut off at the end partially as far as I can see.

You have to run the command to start the OpenVPN server and right after it fails you have to run the journalctl command.

First

Code: (Select All)

sudo systemctl start openvpn@server

Second:

Code: (Select All)

sudo journalctl -xn -l > journalctl.log

I thought you would understand that the error only appears in journald right after the service fails to start. Should have mentioned that in my first post already.

[sagher]

This is the Clinet file connection output report generated by windows. while connecting through ovpn clinet.

Code: (Select All)

Thu Apr 11 14:40:50 2019 OpenVPN 2.4.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 26 2018
Thu Apr 11 14:40:50 2019 Windows version 6.1 (Windows 7) 64bit
Thu Apr 11 14:40:50 2019 library versions: OpenSSL 1.1.0h  27 Mar 2018, LZO 2.10
Enter Management Password:
Thu Apr 11 14:40:50 2019 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Apr 11 14:40:50 2019 Need hold release from management interface, waiting...
Thu Apr 11 14:40:51 2019 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Apr 11 14:40:51 2019 MANAGEMENT: CMD 'state on'
Thu Apr 11 14:40:51 2019 MANAGEMENT: CMD 'log all on'
Thu Apr 11 14:40:51 2019 MANAGEMENT: CMD 'echo all on'
Thu Apr 11 14:40:51 2019 MANAGEMENT: CMD 'bytecount 5'
Thu Apr 11 14:40:51 2019 MANAGEMENT: CMD 'hold off'
Thu Apr 11 14:40:51 2019 MANAGEMENT: CMD 'hold release'
Thu Apr 11 14:40:51 2019 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Thu Apr 11 14:40:51 2019 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Thu Apr 11 14:40:51 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]104.168.25.172:1194
Thu Apr 11 14:40:51 2019 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Apr 11 14:40:51 2019 UDP link local: (not bound)
Thu Apr 11 14:40:51 2019 UDP link remote: [AF_INET]104.168.25.172:1194
Thu Apr 11 14:40:51 2019 MANAGEMENT: >STATE:1554975651,WAIT,,,,,,
Thu Apr 11 14:40:56 2019 MANAGEMENT: CMD 'signal SIGHUP'
Thu Apr 11 14:40:56 2019 SIGHUP[hard,] received, process restarting
Thu Apr 11 14:40:56 2019 MANAGEMENT: >STATE:1554975656,RECONNECTING,SIGHUP,,,,,
Thu Apr 11 14:40:56 2019 OpenVPN 2.4.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 26 2018
Thu Apr 11 14:40:56 2019 Windows version 6.1 (Windows 7) 64bit
Thu Apr 11 14:40:56 2019 library versions: OpenSSL 1.1.0h  27 Mar 2018, LZO 2.10
Thu Apr 11 14:40:56 2019 Restart pause, 5 second(s)
Thu Apr 11 14:41:01 2019 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Thu Apr 11 14:41:01 2019 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Thu Apr 11 14:41:01 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]104.168.25.172:1194
Thu Apr 11 14:41:01 2019 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Apr 11 14:41:01 2019 UDP link local: (not bound)
Thu Apr 11 14:41:01 2019 UDP link remote: [AF_INET]104.168.25.172:1194
Thu Apr 11 14:41:01 2019 MANAGEMENT: >STATE:1554975661,WAIT,,,,,,
Thu Apr 11 14:42:01 2019 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Apr 11 14:42:01 2019 TLS Error: TLS handshake failed
Thu Apr 11 14:42:01 2019 SIGUSR1[soft,tls-error] received, process restarting
Thu Apr 11 14:42:01 2019 MANAGEMENT: >STATE:1554975721,RECONNECTING,tls-error,,,,,
Thu Apr 11 14:42:01 2019 Restart pause, 5 second(s)
Thu Apr 11 14:42:06 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]104.168.25.172:1194
Thu Apr 11 14:42:06 2019 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Apr 11 14:42:06 2019 UDP link local: (not bound)
Thu Apr 11 14:42:06 2019 UDP link remote: [AF_INET]104.168.25.172:1194
Thu Apr 11 14:42:06 2019 MANAGEMENT: >STATE:1554975726,WAIT,,,,,,
Thu Apr 11 14:43:06 2019 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Apr 11 14:43:06 2019 TLS Error: TLS handshake failed
Thu Apr 11 14:43:06 2019 SIGUSR1[soft,tls-error] received, process restarting
Thu Apr 11 14:43:06 2019 MANAGEMENT: >STATE:1554975786,RECONNECTING,tls-error,,,,,
Thu Apr 11 14:43:06 2019 Restart pause, 5 second(s)
Thu Apr 11 14:43:11 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]104.168.25.172:1194
Thu Apr 11 14:43:11 2019 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Apr 11 14:43:11 2019 UDP link local: (not bound)
Thu Apr 11 14:43:11 2019 UDP link remote: [AF_INET]104.168.25.172:1194
Thu Apr 11 14:43:11 2019 MANAGEMENT: >STATE:1554975791,WAIT,,,,,,
Thu Apr 11 14:44:11 2019 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Apr 11 14:44:11 2019 TLS Error: TLS handshake failed
Thu Apr 11 14:44:11 2019 SIGUSR1[soft,tls-error] received, process restarting
Thu Apr 11 14:44:11 2019 MANAGEMENT: >STATE:1554975851,RECONNECTING,tls-error,,,,,
Thu Apr 11 14:44:11 2019 Restart pause, 5 second(s)
Thu Apr 11 14:44:16 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]104.168.25.172:1194
Thu Apr 11 14:44:16 2019 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Apr 11 14:44:16 2019 UDP link local: (not bound)
Thu Apr 11 14:44:16 2019 UDP link remote: [AF_INET]104.168.25.172:1194
Thu Apr 11 14:44:16 2019 MANAGEMENT: >STATE:1554975856,WAIT,,,,,,
Thu Apr 11 14:45:16 2019 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Apr 11 14:45:16 2019 TLS Error: TLS handshake failed
Thu Apr 11 14:45:16 2019 SIGUSR1[soft,tls-error] received, process restarting
Thu Apr 11 14:45:16 2019 MANAGEMENT: >STATE:1554975916,RECONNECTING,tls-error,,,,,
Thu Apr 11 14:45:16 2019 Restart pause, 5 second(s)
Thu Apr 11 14:45:21 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]104.168.25.172:1194
Thu Apr 11 14:45:21 2019 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Apr 11 14:45:21 2019 UDP link local: (not bound)
Thu Apr 11 14:45:21 2019 UDP link remote: [AF_INET]104.168.25.172:1194
Thu Apr 11 14:45:21 2019 MANAGEMENT: >STATE:1554975921,WAIT,,,,,,
Thu Apr 11 14:45:55 2019 SIGTERM[hard,] received, process exiting
Thu Apr 11 14:45:55 2019 MANAGEMENT: >STATE:1554975955,EXITING,SIGTERM,,,,,

[Mashiro]

The client log at the current state of the server is no help at all. Since the server is not even running the client cannot connect to it.

At this moment we still require the full log of journald/journalctl right at the time of the service startup failure of the OpenVPN service.

[sagher]

Code: (Select All)

-- Logs begin at Sat 2019-03-16 13:06:48 EDT, end at Thu 2019-04-11 05:28:16 EDT. --
Apr 11 05:23:33 Post2Host-LosAngeles postfix/smtpd[15078]: connect from unknown[185.234.216.92]
Apr 11 05:23:33 Post2Host-LosAngeles postfix/smtpd[15078]: lost connection after AUTH from unknown[185.234.216.92]
Apr 11 05:23:33 Post2Host-LosAngeles postfix/smtpd[15078]: disconnect from unknown[185.234.216.92]
Apr 11 05:26:53 Post2Host-LosAngeles postfix/anvil[15080]: statistics: max connection rate 1/60s for (smtp:185.234.216.92) at Apr 11 05:23:33
Apr 11 05:26:53 Post2Host-LosAngeles postfix/anvil[15080]: statistics: max connection count 1 for (smtp:185.234.216.92) at Apr 11 05:23:33
Apr 11 05:26:53 Post2Host-LosAngeles postfix/anvil[15080]: statistics: max cache size 1 at Apr 11 05:23:33
Apr 11 05:27:35 Post2Host-LosAngeles sudo[16365]: root : TTY=pts/1 ; PWD=/root ; USER=root ; COMMAND=/bin/journalctl -xn -l
Apr 11 05:27:35 Post2Host-LosAngeles sudo[16365]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Apr 11 05:28:16 Post2Host-LosAngeles sudo[16581]: root : TTY=pts/1 ; PWD=/root ; USER=root ; COMMAND=/bin/journalctl -xn -l
Apr 11 05:28:16 Post2Host-LosAngeles sudo[16581]: pam_unix(sudo:session): session opened for user root by root(uid=0)

[sagher]

I just remove completely all files and folders of openvpn. and i request you to send me a good link tutorial which working fine. that was a 5th link i got from search bar. but all are unworkable.

[Mashiro]

It's been several years now that I have been using OpenVPN to create a VPN server. So other than a tutorial I once made long ago on FreeVPS.us I have no other resources for it, that I can verify that they're really working without issues. Especially on OpenVZ... which is always a little special compared to a normal server or any other hardware virtualization technology like KVM (or others).

Instead of wiping everything... I wish you would have simply posted the logs I have asked for. I could have debugged the issue further to find a solution if you had provided the information here. Sorry to say this now but I feel like wasting time on this thread.

If you want to try my OpenVPN tutorial here is the link: https://freevps.us/thread-15698.html

^ The firewall rule might not work as it is there. You have to adjust the network adapter name from eth0 to venet0 (make sure to check the network adapter on your VPS that has the public IP).

If I would need a VPN would use setup a SoftEther VPN instance (includes OpenVPN, L2TP, their own SSL VPN and more): https://freevps.us/thread-19669.html

SoftEther always worked everywhere for me.

Last but not least I can only offer the resort option to install it for you (SoftEther not OpenVPN).

[sagher]

Yes i remember when i am also part of freevps.us and then i try to setup softether vps but stuck on many commands and hands up. well thanks for sharing those links.