|
|
|
26-07-2010 19:02
|
[DM500] DM500 - OpenVPN
|
|
silelis
Member
Posts: 3
Location: Poland
Joined: 29.08.08
|
I tried to install OpenVPN (openvpn01_nab.tgz) on PLi follow by this instruction:
When I try execute the openVPN:
/var/sbin/openvpn --config /var/etc/openvpn/file.conf
It send me back error:
Uploaded with ImageShack.us
Can someone give me advice what can I to to run openVPN on PLI or other image (expect DartStar II).
|
|
|
|
|
|
|
26-07-2010 19:11
|
RE: [DM500] DM500 - OpenVPN
|
|
dAF2000
Administrator
Forum Moderator
PLi® Core member
Posts: 9629
Joined: 13.04.05
|
Welcome here.
See: http://www.pli-images.org/forum/viewthread.php?forum_id=65&thread_id=7742&pid=84195#post_84195
|
|
|
Many answers to your question can be found in our wiki: http://www.pli-images.org/modules/wiki/index.php
DM500HD, DM600, DM7000, VU+duo
|
|
|
|
30-07-2010 22:41
|
Re: [DM500] DM500 - OpenVPN
|
|
silelis
Member
Posts: 3
Location: Poland
Joined: 29.08.08
|
It is possibel to install openVPN on DM500 and other than Nabilo image.
I made it on Gemini_0450_DM500_max_var_13092008.img. The only disadvantage is free flash memory.
Tutorial is here - unless in polish, but activities and commends are in table, so I hope that You'll understand.
|
|
|
|
|
|
|
05-08-2010 18:38
|
Re: [DM500] DM500 - OpenVPN
|
|
PaphosAL
Member
Posts: 54
Location: UK
Joined: 02.07.10
|
Thanks, sylis- but your link wants us to register on a Polish board. Is it possible to copy and paste the Table you mention into this thread, please?
Thanks- AL 
|
|
|
|
|
|
|
05-08-2010 21:12
|
Re: [DM500] DM500 - OpenVPN
|
|
silelis
Member
Posts: 3
Location: Poland
Joined: 29.08.08
|
I know I didn't have a time at that exactly moment so I decidet to put link to polish tutorial.
Now in english:
1) I tested this config on Gemini_0450_DM500_max_var_13092008.img, and I don't know if It'll go on Pli but I there is possibility.
2) As it's well known we need a lot of free flash mem. My solution is to cut files:
- automount.conf
- cables.xml
- satellites.xml
- smb.conf
- terrestrial.xml
- cam configs
from tugs You don't need or any comments (they take space, my files are shown on polish board sory, but I don't have to much time to recopy it to this board).
3) Just download OpenVPN from here, unzip it and put into /tmp/
4) telnet to DM500 and give command:
tar -xvzf /tmp/openvpn01_nab.tgz
It'll unpack openVPN
5) After that in telnet give commands:
ln -s /var/lib/libssl.so.0.9.7 /var/lib/libssl.so.0
ln -s /var/lib/libcrypto.so.0.9.7 /var/lib/libcrypto.so.0
ln -s /var/lib/libcrypto.so.0.9.7 /var/lib/libcrypto.so
The openVPN is installed.
6) As I told there is not to much flash mem in DM500 so for example openVPN do not manage with comp-lzo compression and other thinhs so the most importance is client and server configuration which will be compact with DM500 OpenVPN.
My confirmed config is:
Server:
port 1194
proto tcp-server
dev tun
dh /var/etc/openvpn/keys/dh.pem
ca /var/etc/openvpn/keys/ca.crt
cert /var/etc/openvpn/keys/cert.pem
key /var/etc/openvpn/keys/key.pem
server 10.8.0.0 255.255.255.0
route 10.8.0.0 255.255.255.0
client-to-client
client-config-dir /tmp/
#ifconfig-pool-persist /tmp/openvpn/ipp.txt
keepalive 10 120
persist-key
persist-tun
status /tmp/openvpn/openvpn-status.log
tun-mtu 1500
tls-server
mode server
log-append /tmp/openvpn/openvpn.log
verb 3
max-clients 20
#;comp-lzo - not managed by DM500 vpn other on other than nabilo image.
Client:
client
dev tun
proto tcp-client
remote XXX.XXX.XXX.XXX 1194
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ca /var/etc/openvpn/keys/ca.crt
cert /var/etc/openvpn/keys/server.crt
key /var/etc/openvpn/keys/server.key
ns-cert-type server
ping 10
ping-restart 60
pull
verb 3
float
The meaning of config lines is explained on this side as well as any other things like certificate generating.
My configuration works on H: DM500 S: Gemini_0450_DM500_max_var_13092008.img (client) <----> H: Linksys WRT54GL S: DD-WRT v24-sp1 (07/27/08) vpn (Server) <---> H: DM8000 S: Newnigma 3.0.1 (client).
|
|
|
|
|
|
|
06-08-2010 12:25
|
Re: [DM500] DM500 - OpenVPN
|
|
PaphosAL
Member
Posts: 54
Location: UK
Joined: 02.07.10
|
This is excellent input thanks, silelis- and your English is 1000% better than my Polish!!
In it's present form as downloaded and untarred, OpenVPN should not be working for you. It is missing one small, but vital, driver. So your log should still contain the same error as shown in your original screenshot:
Note: Cannot open TUN/TAP dev /dev/net/tun: no such file or directory (errno=2)
Also, I believe your start command is wrong. I have just tested a fix for both issues on my DM500 (OpenPLi Maxvar). Unrar the attached and pop the vpn folder into /var/lib and you should then see this via FTP:
/var/lib/vpn/tun.ko (9kb - standard chmod 644)
Next, if you don't have a /var/etc/init file, then please create one, and paste these two lines in:
insmod /var/lib/vpn/tun.ko
./var/bin/openvpn_script.sh start
Make sure it is in Unix/ANSI format for linux, not DOS/Windows format!!
After you reboot, a telnet ps should show openvpn as a running process. And your openvpn.log should show the tunnel is now opened:
TUN/TAP device tun0 opened
TUN/TAP TX queue length set to 100
A final check is to FTP in and you should now see that /dev/net/tun exists (which it did not before)
Note that the openvpn_script.sh contains more useful 'case' commands as well as 'start' for controlling OpenVPN (stop - restart - reload etc)- and this would lend itself quite nicely to a custom 'OpenVPN Control' ppanel.
Cheers- AL
PaphosAL attached the following file(s):
|
|
|
|
|
|
|
08-08-2010 00:43
|
RE: [DM500] DM500 - OpenVPN
|
|
lincsat
Member
Posts: 5
Joined: 11.05.10
|
The OpenVPN files do seem to fit into the DM500 Pli image, VPN initializes OK but then stops just when trying to get cccam to do it's business. The same config and keys etc work fine in Nabilo DS2 and a Tuxbox image. Would be great to get it working in Pli.
Can anyone think of anything in Pli that would stop a cam accessing the VPN?
|
|
|
|
|
|
|
05-09-2010 23:27
|
RE: [DM500] DM500 - OpenVPN
|
|
ttom
Member
Posts: 4
Joined: 05.09.10
|
I had an issue with tun.ko from nabilo, it was working fine when testing in LAN but when I did port forward on router then I was able to establish connection but openvpn crashed each time when I tried to ssh/ping/whatever to server.
I had to rebuild the tun.ko module and now it works fine.
|
|
|
|
|
|
|
05-09-2010 23:35
|
Re: [DM500] DM500 - OpenVPN
[Re: ttom]
|
|
ttom
Member
Posts: 4
Joined: 05.09.10
|
new module in attachment,
openvpn crashed with stack trace in dmesg saying panic in skbuff/skput over...
ttom attached the following file(s):
|
|
|
|
|
|
|
06-09-2010 12:44
|
Re: [DM500] DM500 - OpenVPN
[Re: ttom]
|
|
ttom
Member
Posts: 4
Joined: 05.09.10
|
In attachment recompiled openvpn with lzo enabled (compression) and --enable-small param, so binary is smaller but it doesnt have 'how to use' message. I've attached libs from same build. All files have been stripped.
So far it's working pretty good on dm500(openvpn,iptables)-wag200(port forward to dm for openvpn)-wrt54gl-dm500(openvpn in client mode)
ttom attached the following file(s):
|
|
|
|
|
|
|
06-09-2010 22:55
|
Re: [DM500] DM500 - OpenVPN
|
|
PaphosAL
Member
Posts: 54
Location: UK
Joined: 02.07.10
|
If Team PLi decided to switch ON tun support in the e1 kernel, (just like tuxbox do), then we would see /dev/net/tun on startup, and OpenVPN would be very simple to get properly working!
Forget trying to rip the tun.ko driver out of DS2, it is a non-working duplicate of the real tun support already embedded in their tuxbox kernel.
So it's up to the PLi team whether or not they wish to activate tun
Cheers- AL 
|
|
|
|
|
|
|
07-09-2010 00:43
|
RE: [DM500] DM500 - OpenVPN
|
|
ttom
Member
Posts: 4
Joined: 05.09.10
|
I would say it's more a free space issue, you need 2 pretty big libs and openvpn binary.
Right now I have maxvar image, with cccam, openvpn, iptables and only 300kb free space  . I guess I could remove dropbear(180kb) and maybe software.xml(100kb) so I will have 600kb then which is still not enough to put newcs or something else.
ps. tun module I've attached is from e1 kernel 
|
|
|
|
|
|
|
07-09-2010 09:50
|
Re: [DM500] DM500 - OpenVPN
[Re: ttom]
|
|
PaphosAL
Member
Posts: 54
Location: UK
Joined: 02.07.10
|
ttom wrote:
I would say it's more a free space issue, you need 2 pretty big libs and openvpn binary.
Right now I have maxvar image, with cccam, openvpn, iptables and only 300kb free space . I guess I could remove dropbear(180kb) and maybe software.xml(100kb) so I will have 600kb then which is still not enough to put newcs or something else.
ps. tun module I've attached is from e1 kernel
With time and effort applied to editing the maxvar root, and removing the web I/F and other non-essential stuff in there, we have CCcam / OpenVPN / db_epg binary / three picon Skins (modded Astro, Carbon, Wise) / seven games all located and working in the SquashFS root partition.
Our picons.tar.gz is downloaded from the web at boot and umzipped to (and run from) the /tmp folder. This all results in 2.3mb Free Space in var. In fact, we are 148kb below the 4.0mb threshold for the maxvar root- so in theory, we could resize this to 3.875mb and give a further 128kb to var!
Another variant I'm playing with is my 'server edition' - where all the stuff mentioned above (and more) is hosted on and run from my LAN server. So this has a 3.0mb root and 3840kb var (3.3mb Free). All good fun!!
Cheers- AL
|
|
|
|
