pivpn: PiVPN stopped working, was working previously
PiVPN Issue Template
Console output of curl install.pivpn.io | bash
Console output of pivpn add
or pivpn add nopass
Console output of pivpn debug
::: :::
:: PiVPN Debug ::
::: :::
:: Latest Commit ::
::: :::
commit [redacted]
Author: 0-kaladin <0.kaladin@gmail.com>
Date: Mon Feb 27 21:01:23 2017 -0500
Update README for IRC channel
Due to discontinuation of Google Spaces
::: :::
:: Recursive list of files in ::
:: /etc/openvpn/easy-rsa/pki ::
::: :::
/etc/openvpn/easy-rsa/pki/:
[Redacted].ovpn
ca.crt
Default.txt
dh2048.pem
[Redacted].ovpn
index.txt
index.txt.attr
index.txt.attr.old
index.txt.old
[Redacted].ovpn
issued
private
serial
serial.old
ta.key
/etc/openvpn/easy-rsa/pki/issued:
[Redacted].crt
[Redacted].crt
/etc/openvpn/easy-rsa/pki/private:
[Redacted].key
ca.key
[Redacted].key
::: :::
:: Output of /etc/pivpn/* ::
::: :::
:: START /etc/pivpn/DET_PLATFORM ::
Raspbian
:: END /etc/pivpn/DET_PLATFORM ::
:: START /etc/pivpn/INSTALL_PORT ::
443
:: END /etc/pivpn/INSTALL_PORT ::
:: START /etc/pivpn/INSTALL_PROTO ::
tcp
:: END /etc/pivpn/INSTALL_PROTO ::
:: START /etc/pivpn/INSTALL_USER ::
[Redacted]
:: END /etc/pivpn/INSTALL_USER ::
:: START /etc/pivpn/NO_UFW ::
1
:: END /etc/pivpn/NO_UFW ::
:: START /etc/pivpn/pivpnINTERFACE ::
eth0
:: END /etc/pivpn/pivpnINTERFACE ::
:: START /etc/pivpn/REVOKE_STATUS ::
0
:: END /etc/pivpn/REVOKE_STATUS ::
::: :::
:: /etc/openvpn/easy-rsa/pki/Default.txt ::
::: :::
client
dev tun
proto tcp
remote [Redacted] 443
resolv-retry infinite
nobind
persist-key
persist-tun
key-direction 1
remote-cert-tls server
tls-version-min 1.2
verify-x509-name server name
cipher AES-256-CBC
auth SHA256
comp-lzo
verb 1
::: :::
:: Debug Output Complete ::
::: :::
Issue
PiVPN was working great until a couple of days ago. I was able to connect with up to 5 different devices, now none of them connect. The service is running on the raspberry pi, but no luck connecting.
About this issue
- Original URL
- State: closed
- Created 7 years ago
- Comments: 24 (8 by maintainers)
Well I found the solution for me - hopefully it helps you too!
Found that /var/log/openvpn.log on the RPi had the line “VERIFY ERROR: depth=0, error=CRL has expired” Searching that gave several results saying to regenerate the Certificate Revocation List, but I couldn’t find how to do this with pivpn.
Found this workaround and it worked: use pivpn to add a new user, then revoke the user - the revoke output notes that it regenerates the CRL. I was then able to connect again straightaway 😃 https://forums.openvpn.net/viewtopic.php?t=26585