OpenVPN - zGemma

opkg list | grep vpn
openvpn clients.
This was formerly part of the openvpn package.
openvpn - 2.4.3-r0.1 - A full-featured SSL VPN solution via tun device.
openvpn-sample - 2.4.3-r0.1 - A full-featured SSL VPN solution via tun device.
root@osmini:~# opkg install openvpn
Installing kernel-module-tun (4.11) on root.
Installing openvpn (2.4.3) on root.
Removing any system startup links for openvpn ...
Configuring kernel-module-tun.
Configuring openvpn.
Adding system startup for /etc/init.d/openvpn.
Starting openvpn: Client.
modprobe: ERROR: could not insert 'tun': Exec format error

It runs then stops
 
after typing

cd /sbin

your command prompt should look like

root@zgemmah2s:/sbin#

then type: modprobe tun

is that bringing up the ERROR: xxxxxx message?
 
**** that is so tilting.

do privateinternetaccess provide a .ovpn file?

you could try putting that in etc/openvpn [deleting the other files]

then reload putty and type

openvpn /etc/openvpn/yourPIAovpnfilename.ovpn

it will then try to run the script and it will tell you where it fails.

you might have to edit the auth-user.... line back to how you had it in your original post with the login.txt file in the /etc/openvpn

i basically went down that route until i could run it through putty and then renamed it client.conf and deleted the /etc/openvpn from the auth-user line [my vpn provider has the certificates in the .ovpn file, so didnt need to make ca.crt files]

sorry can't be more help.

also the dev tun line can be changed to dev tun0 i think that helped me along.

again, not an expert all this tinkering took me hours of going back and forth, so knowing exactly what cracked it for me is hard haha
 
**** that is so tilting.

do privateinternetaccess provide a .ovpn file?

you could try putting that in etc/openvpn [deleting the other files]

then reload putty and type

openvpn /etc/openvpn/yourPIAovpnfilename.ovpn

it will then try to run the script and it will tell you where it fails.

you might have to edit the auth-user.... line back to how you had it in your original post with the login.txt file in the /etc/openvpn

i basically went down that route until i could run it through putty and then renamed it client.conf and deleted the /etc/openvpn from the auth-user line [my vpn provider has the certificates in the .ovpn file, so didnt need to make ca.crt files]

sorry can't be more help.

also the dev tun line can be changed to dev tun0 i think that helped me along.

again, not an expert all this tinkering took me hours of going back and forth, so knowing exactly what cracked it for me is hard haha

yes they provide with ovpn file I ran as above but nothing happened got this
Options error: I'm trying to parse "/etc/openvpn/" as an --option parameter but I don't see a leading '--'
Thank you for your help
Use --help for more information
 
make sure your ovpn file has no unusual characters. rename it to test.ovpn and the put it in etc/openvpn

then run

openvpn /etc/openvpn/test.ovpn
 
make sure your ovpn file has no unusual characters. rename it to test.ovpn and the put it in etc/openvpn

then run

openvpn /etc/openvpn/test.ovpn

The ovpn files is the client.conf file remaned from ovpn

This is in log file
Mon Oct 2 16:45:03 2017 WARNING: file '/etc/openvpn/login.txt' is group or others accessible
Mon Oct 2 16:45:03 2017 OpenVPN 2.4.3 mipsel-oe-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Sep 7 2017
Mon Oct 2 16:45:03 2017 library versions: OpenSSL 1.0.2j 26 Sep 2016, LZO 2.09
Mon Oct 2 16:45:03 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]31.24.226.189:1198
Mon Oct 2 16:45:03 2017 UDP link local: (not bound)
Mon Oct 2 16:45:03 2017 UDP link remote: [AF_INET]31.24.226.189:1198
Mon Oct 2 16:45:04 2017 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1558', remote='link-mtu 1542'
Mon Oct 2 16:45:04 2017 WARNING: 'cipher' is used inconsistently, local='cipher AES-128-CBC', remote='cipher BF-CBC'
Mon Oct 2 16:45:04 2017 [790bdc3fe236222129407734e906b872] Peer Connection Initiated with [AF_INET]31.24.226.189:1198
Mon Oct 2 16:45:05 2017 auth-token received, disabling auth-nocache for the authentication token
Mon Oct 2 16:45:05 2017 ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)
Mon Oct 2 16:45:05 2017 Exiting due to fatal error
 
Last edited:
Hi i am using Zgemma Open ATV 6 and privateinternetaccesst VPN. i followed this guide. https://www.tech2guides.co.uk/how-to-setup-vpn-on-enigma2-openatv/ but when it comes to starting the VPN i have to select start about 5 times and then it shows running and then stops after a few seconds. The log file shows this.

Options error: --ca fails with 'ca.rsa.2048.crt': No such file or directory
Options error: --crl-verify fails with 'crl.rsa.2048.pem': No such file or directory
Options error: Please correct these errors.
Use --help for more information.

not sure what this mean, does anyone know what i am doing wrong?. Thanks
 
make sure your ovpn file has no unusual characters. rename it to

**** that is so tilting.

do privateinternetaccess provide a .ovpn file?

you could try putting that in etc/openvpn [deleting the other files]

then reload putty and type

openvpn /etc/openvpn/yourPIAovpnfilename.ovpn

it will then try to run the script and it will tell you where it fails.

you might have to edit the auth-user.... line back to how you had it in your original post with the login.txt file in the /etc/openvpn

i basically went down that route until i could run it through putty and then renamed it client.conf and deleted the /etc/openvpn from the auth-user line [my vpn provider has the certificates in the .ovpn file, so didnt need to make ca.crt files]

sorry can't be more help.

also the dev tun line can be changed to dev tun0 i think that helped me along.

again, not an expert all this tinkering took me hours of going back and forth, so knowing exactly what cracked it for me is hard haha

after typing

cd /sbin

your command prompt should look like

root@zgemmah2s:/sbin#

then type: modprobe tun

is that bringing up the ERROR: xxxxxx message?


i am using Zgemma Open ATV 6 and privateinternetaccesst VPN. i followed this guide. https://www.tech2guides.co.uk/how-to-setup-vpn-on-enigma2-openatv/ but when it comes to starting the VPN i have to select start about 5 times and then it shows running and then stops after a few seconds. The log file shows this.

Options error: --ca fails with 'ca.rsa.2048.crt': No such file or directory
Options error: --crl-verify fails with 'crl.rsa.2048.pem': No such file or directory
Options error: Please correct these errors.
Use --help for more information.

Can you help ?
 
it means when the script hits line that finds the 'ca.rsa.2048.crt'' file it can't locate it

same for the .pem file

make sure you have the files in the /etc/openvpn folder and they are correctly named.

open your client.conf file and look for the line that begins with

ca

it should look like

ca ca.rsa.2048.crt

not sure what the crl-verify line and the file mentioned does though
 
it means when the script hits line that finds the 'ca.rsa.2048.crt'' file it can't locate it

same for the .pem file

make sure you have the files in the /etc/openvpn folder and they are correctly named.

open your client.conf file and look for the line that begins with

ca

it should look like

ca ca.rsa.2048.crt

not sure what the crl-verify line and the file mentioned does though

my client.conf looks like, this is from privateinternetacessvpn, the one on the guide https://www.tech2guides.co.uk/how-to-setup-vpn-on-enigma2-openatv/

has a couple of other entries, do i need to enter them as well such as ver 3 or persist remote ip ?

client
dev tun
proto tcp
remote XXX.XXX.XXX.XX 443
resolv-retry infinite
nobind
auth-nocache
persist-key
persist-tun
cipher bf-cbc
auth sha1
tls-client
remote-cert-tls server
auth-user-pass login.txt
comp-lzo
verb 1
reneg-sec 0
ca ca.crt
disable-occ
log /etc/openvpn/ipvanish.log
 
ive made some progress i started from scratch and now the VPN is showing running but when i SSH wget -qO- http://ipecho.net/plain;echo to find my ip it shows up as empty, there no ip so no channels, when i stop the VPN i see my ISP IP and get all the channels back. Not sure why this is.
 
Don’t know if this helps I had same problem starting vpn then noticed my password.conf file was actually called password.conf.txt so unchecked hide extensions for known file types in folder options on pc renamed the password.conf correctly put that on and it worked...at least it stays connected to vpn but iptv goes black after a minute need to figure this part out now
 
Hi

I have a Zgemma box and an IPTV service. for a few days i have been trying to setup a VPN i have tried 2 differnet VPN providers the latest one is IPvanish. I followed this guide

https://www.tech2guides.co.uk/how-to-setup-vpn-on-enigma2-openatv/

I did exactly what it said but when i got and start the VPN i can see it saying "Running", but after a few seconds the channel stops working. when i do the w-get command to find out the IP there is no IP. when i stop the VPN i see my ISP IP.

Can anyone help. I have tried a london VPN file and US VPN file both have the same results.
 
ok i have a fix for this

open putty and connect to your box with the ssh box ticked

enter the following commands:

opkg list | grep vpn

then...

opkg install openvpn

then...

update-rc.d openvpn defaults

it should now work
This fix seems allow me to enter the VPN menu on the Zgemma now, but when i select start, i see "running" but if it then if i check my IP its empty and i have no channels. only if i stop the VPN my IP goes back to my ISP IP and i have channels. Could it be this fix that is cuaing this issue?. is it possible to flash an older OpenATV image like 5.3 or will this still have the same issue with "feeds are down".
 
I don't know to be honest.

I have it running on the latest openatv build. Though I had to install the tun packages as they aren't unpacked in wooshbuild.

Maybe try your VPN on an android device through the openvpn android app.

It might be a problem with your provider.

If you have an error log copy and paste some of the lines into google to see if others have the same problem.

That's how I eventually cobbled a fix together. Just a lot of trial and error.
 
ok i have a fix for this

open putty and connect to your box with the ssh box ticked

enter the following commands:

opkg list | grep vpn

then...

opkg install openvpn

then...

update-rc.d openvpn defaults

it should now work
So did you do a clean installed of OpenATV 6 and then apply your fix and the VPN started working, or did you apply the fix to the whooshbuild? i have logs but cant see anyhting wrong. ill try google.

Tue Oct 3 22:52:29 2017 WARNING: file 'login.txt' is group or others accessible
Tue Oct 3 22:52:29 2017 OpenVPN 2.4.3 mipsel-oe-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jun 27 2017
Tue Oct 3 22:52:29 2017 library versions: OpenSSL 1.0.2j 26 Sep 2016, LZO 2.09
Tue Oct 3 22:52:29 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]209.197.30.84:443
Tue Oct 3 22:52:29 2017 Socket Buffers: R=[163840->163840] S=[163840->163840]
Tue Oct 3 22:52:29 2017 UDP link local: (not bound)
Tue Oct 3 22:52:29 2017 UDP link remote: [AF_INET]209.197.30.84:443
Tue Oct 3 22:52:29 2017 TLS: Initial packet from [AF_INET]209.197.30.84:443, sid=632032a7 d03e5725
Tue Oct 3 22:52:29 2017 VERIFY OK: depth=1, C=US, ST=FL, L=Winter Park, O=IPVanish, OU=IPVanish VPN, CN=IPVanish CA, emailAddress=support@ipvanish.com
Tue Oct 3 22:52:29 2017 VERIFY X509NAME OK: C=US, ST=FL, L=Winter Park, O=IPVanish, OU=IPVanish VPN, CN=nyc-a08.ipvanish.com, emailAddress=support@ipvanish.com
Tue Oct 3 22:52:29 2017 VERIFY OK: depth=0, C=US, ST=FL, L=Winter Park, O=IPVanish, OU=IPVanish VPN, CN=nyc-a08.ipvanish.com, emailAddress=support@ipvanish.com
Tue Oct 3 22:52:30 2017 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Oct 3 22:52:30 2017 [nyc-a08.ipvanish.com] Peer Connection Initiated with [AF_INET]209.197.30.84:443
Tue Oct 3 22:52:32 2017 SENT CONTROL [nyc-a08.ipvanish.com]: 'PUSH_REQUEST' (status=1)
Tue Oct 3 22:52:37 2017 SENT CONTROL [nyc-a08.ipvanish.com]: 'PUSH_REQUEST' (status=1)
Tue Oct 3 22:52:42 2017 SENT CONTROL [nyc-a08.ipvanish.com]: 'PUSH_REQUEST' (status=1)
Tue Oct 3 22:52:46 2017 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 198.18.0.1,dhcp-option DNS 198.18.0.2,rcvbuf 262144,explicit-exit-notify 5,route-gateway 172.21.20.1,topology subnet,ping 20,ping-restart 40,ifconfig 172.21.20.35 255.255.254.0'
Tue Oct 3 22:52:46 2017 Option 'explicit-exit-notify' in [PUSH-OPTIONS]:5 is ignored by previous <connection> blocks
Tue Oct 3 22:52:46 2017 OPTIONS IMPORT: timers and/or timeouts modified
Tue Oct 3 22:52:46 2017 OPTIONS IMPORT: explicit notify parm(s) modified
Tue Oct 3 22:52:46 2017 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Tue Oct 3 22:52:46 2017 Socket Buffers: R=[163840->327680] S=[163840->163840]
Tue Oct 3 22:52:46 2017 OPTIONS IMPORT: --ifconfig/up options modified
Tue Oct 3 22:52:46 2017 OPTIONS IMPORT: route options modified
Tue Oct 3 22:52:46 2017 OPTIONS IMPORT: route-related options modified
Tue Oct 3 22:52:46 2017 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Oct 3 22:52:46 2017 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Oct 3 22:52:46 2017 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Oct 3 22:52:46 2017 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Oct 3 22:52:46 2017 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Oct 3 22:52:46 2017 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 IFACE=eth0 HWADDR=00:15:c0:37:a9:c4
Tue Oct 3 22:52:46 2017 TUN/TAP device tun0 opened
Tue Oct 3 22:52:46 2017 TUN/TAP TX queue length set to 100
Tue Oct 3 22:52:46 2017 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Oct 3 22:52:46 2017 /sbin/ip link set dev tun0 up mtu 1500
Tue Oct 3 22:52:46 2017 /sbin/ip addr add dev tun0 172.21.20.35/23 broadcast 172.21.21.255
Tue Oct 3 22:52:46 2017 /sbin/ip route add 209.197.30.84/32 via 192.168.0.1
Tue Oct 3 22:52:46 2017 /sbin/ip route add 0.0.0.0/1 via 172.21.20.1
Tue Oct 3 22:52:46 2017 /sbin/ip route add 128.0.0.0/1 via 172.21.20.1
Tue Oct 3 22:52:46 2017 Initialization Sequence Completed
 
Yeah, initialization sequence initiated should mean it is all ok.

I clean installed wooshbuild. Ran the opkg openvpn commands and then

Cd /sbin

Modprobe tun

And it all worked.

Check your provider works on another platform like android or Windows through openvpn.

Oh and

chmod 600 /etc/openvpn/logi.txt

will protect your login details.
 
ok i have a fix for this

open putty and connect to your box with the ssh box ticked

enter the following commands:

opkg list | grep vpn

then...

opkg install openvpn

then...

update-rc.d openvpn defaults

it should now work

i have tried ipvanish on windows, i can connect to london servers fine and get an ip. i just dont get why the zgemma will show connected but not get an IP. when using the windows vpn utility i had to install "Windows TAP" as it initially was not connecting and getting an error. would there be something similar i need to install on the Zgemma wolud you know?
 
Back
Top