{"id":19284,"date":"2016-08-28T06:32:45","date_gmt":"2016-08-27T22:32:45","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2016\/08\/28\/openvpn-%e7%84%a1%e6%b3%95%e6%ad%a3%e5%b8%b8%e5%95%9f%e5%8b%95\/"},"modified":"2016-08-28T06:32:45","modified_gmt":"2016-08-27T22:32:45","slug":"openvpn-%e7%84%a1%e6%b3%95%e6%ad%a3%e5%b8%b8%e5%95%9f%e5%8b%95","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2016\/08\/28\/openvpn-%e7%84%a1%e6%b3%95%e6%ad%a3%e5%b8%b8%e5%95%9f%e5%8b%95\/","title":{"rendered":"OpenVPN \u7121\u6cd5\u6b63\u5e38\u555f\u52d5"},"content":{"rendered":"

1. \u5b89\u88dd\u53ca\u4fee\u6539\u5b8c OpenVPN\uff0c\u8981\u555f\u52d5\u6642\uff0c\u537b\u51fa\u73fe\u932f\u8aa4
\u00a0# systemctl start openvpn@server.service<\/span>
Job for openvpn@server.service failed because the control process exited with error code. See “systemctl status openvpn@server.service<\/span>” and “journalctl -xe<\/span>” for details.<\/span><\/p>\n

2. \u6aa2\u67e5 OpenVPN \u670d\u52d9\u72c0\u614b
# systemctl status openvpn@server.service<\/span>
\u25cf openvpn@server.service – OpenVPN Robust And Highly Flexible Tunneling Application On server<\/span>
\u00a0\u00a0 Loaded: loaded (\/usr\/lib\/systemd\/system\/openvpn@.service; enabled; vendor preset: disabled)<\/span>
\u00a0\u00a0 Active: failed<\/span> (Result: exit-code) since \u4e8c 2016-08-16 11:31:37 CST; 5min ago<\/span>
\u00a0 Process: 1883 ExecStart=\/usr\/sbin\/openvpn –daemon –writepid \/var\/run\/openvpn\/%i.pid –cd \/etc\/openvpn\/ –config %i.conf (code=exited, status=1\/FAILURE)<\/span>
\u00a0Main PID: 1845 (code=exited, status=0\/SUCCESS)<\/span><\/p>\n

\u00a08\u6708 16 11:31:37 xxxxx.sytes.net systemd[1]: Starting OpenVPN Robust And Highly Flexible Tunneling Application On server…<\/span>
\u00a08\u6708 16 11:31:37 xxxxx.sytes.net openvpn[1883]: Options error: In [CMD-LINE]:1:<\/span> Error opening configuration file: server.conf<\/span>
\u00a08\u6708 16 11:31:37 xxxxx.sytes.net openvpn[1883]: Use –help for more information.<\/span>
\u00a08\u6708 16 11:31:37 xxxxx.sytes.net systemd[1]: openvpn@server.service: control process exited, code=exited status=1<\/span>
\u00a08\u6708 16 11:31:37 xxxxx.sytes.net systemd[1]: Failed to start OpenVPN Robust And Highly Flexible Tunneling Application On server.<\/span>
\u00a08\u6708 16 11:31:37 xxxxx.sytes.net systemd[1]: Unit openvpn@server.service entered failed state.<\/span>
\u00a08\u6708 16 11:31:37 xxxxx.sytes.net systemd[1]: openvpn@server.service failed.<\/span>
[@more@]3. \u53e6\u5916\u4e00\u7a2e\u6aa2\u67e5\u65b9\u5f0f
# journalctl -xe<\/span>
— Unit openvpn@server.service has begun starting up.<\/span>
\u00a08\u6708 16 11:31:37 xxxxx.sytes.net openvpn[1883]: Options error: In [CMD-LINE]:1<\/span>: Error opening configuration file: server.conf<\/span>
\u00a08\u6708 16 11:31:37 xxxxx.sytes.net openvpn[1883]: Use –help for more information.<\/span>
\u00a08\u6708 16 11:31:37 xxxxx.sytes.net systemd[1]: openvpn@server.service: control process exited, code=exited status=1<\/span>
\u00a08\u6708 16 11:31:37 xxxxx.sytes.net systemd[1]: Failed to start OpenVPN Robust And Highly Flexible Tunneling Application On server.<\/span>
— Subject: Unit openvpn@server.service has failed<\/span>
— Defined-By: systemd<\/span>
— Support: http:\/\/lists.freedesktop.org\/mailman\/listinfo\/systemd-devel<\/span>
—<\/span>
— Unit openvpn@server.service has failed.<\/span>
—<\/span>
— The result is failed.<\/span>
\u00a08\u6708 16 11:31:37 xxxxx.sytes.net systemd[1]: Unit openvpn@server.service entered failed state.<\/span>
\u00a08\u6708 16 11:31:37 xxxxx.sytes.net systemd[1]: openvpn@server.service failed.<\/span>
\u00a08\u6708 16 11:31:37 xxxxx.sytes.net polkitd[1816]: Unregistered Authentication Agent for unix-process:1878:1286078 (system bus name :1.37, object path \/<\/span><\/p>\n

\u770b\u8a0a\u606f\u4f3c\u4e4e\u662f\u7121\u6cd5\u958b\u555f \/etc\/openvpn\/server.conf<\/span> \u8a2d\u5b9a\u6a94<\/p>\n

4. \u6aa2\u67e5 \/etc\/openvpn\/server.conf<\/span> \u6a94\u6848\u662f\u5426\u5b58\u5728
# ls -l \/etc\/openvpn\/server.conf<\/span>
-rw-r–r–. 1 root root 10441\u00a0 8\u6708 16 11:30 \/etc\/openvpn\/server.conf<\/span><\/p>\n

5. \u6a94\u6848\u6b63\u5e38\u5b58\u5728\uff0c\u56e0\u70ba\u9019\u4e00\u53f0 Server \u6709\u958b\u555f SELinux\uff0c\u6240\u4ee5\u6aa2\u67e5\u6a94\u6848\u7684\u5c6c\u6027
# ls -lZ \/etc\/openvpn\/server.conf*<\/span>
-rw-r–r–. root root unconfined_u:object_r:admin_home_t<\/span>:s0 \/etc\/openvpn\/server.conf<\/span>
-rw-r–r–. root root unconfined_u:object_r:openvpn_etc_t:s0 \/etc\/openvpn\/server.conf.20160816<\/span><\/p>\n

6. \u4fee\u6539\u5c6c\u6027
# chcon -t openvpn_etc_t \/etc\/openvpn\/server.conf<\/span><\/p>\n

7. \u518d\u6aa2\u67e5\u4e00\u6b21
# ls -lZ \/etc\/openvpn\/server.conf*<\/span>
-rw-r–r–. root root unconfined_u:object_r:openvpn_etc_t<\/span>:s0 \/etc\/openvpn\/server.conf<\/span>
-rw-r–r–. root root unconfined_u:object_r:openvpn_etc_t:s0 \/etc\/openvpn\/server.conf.20160816<\/span><\/p>\n

8. \u555f\u52d5 OpenVPN \u670d\u52d9
# systemctl start openvpn@server.service<\/span>
# systemctl status openvpn@server.service<\/span>
\u25cf openvpn@server.service – OpenVPN Robust And Highly Flexible Tunneling Application On server<\/span>
\u00a0\u00a0 Loaded: loaded (\/usr\/lib\/systemd\/system\/openvpn@.service; enabled; vendor preset: disabled)<\/span>
\u00a0\u00a0 Active: active (running)<\/span> since \u4e8c 2016-08-16 11:49:11 CST; 10s ago<\/span>
\u00a0 Process: 1934 ExecStart=\/usr\/sbin\/openvpn –daemon –writepid \/var\/run\/openvpn\/%i.pid –cd \/etc\/openvpn\/ –config %i.conf (code=exited, status=0\/SUCCESS)<\/span>
\u00a0Main PID: 1935 (openvpn)<\/span>
\u00a0\u00a0 CGroup: \/system.slice\/system-openvpn.slice\/openvpn@server.service<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 mq1935 \/usr\/sbin\/openvpn –daemon –writepid \/var\/run\/openvpn\/server.pid –cd \/etc\/openvpn\/ –config server.conf<\/span><\/p>\n

\u00a08\u6708 16 11:49:11 xxxxx.sytes.net openvpn[1935]: GID set to nobody<\/span>
\u00a08\u6708 16 11:49:11 xxxxx.sytes.net openvpn[1935]: UID set to nobody<\/span>
\u00a08\u6708 16 11:49:11 xxxxx.sytes.net openvpn[1935]: Listening for incoming TCP connection on [undef]<\/span>
\u00a08\u6708 16 11:49:11 xxxxx.sytes.net openvpn[1935]: TCPv4_SERVER link local (bound): [undef]<\/span>
\u00a08\u6708 16 11:49:11 xxxxx.sytes.net openvpn[1935]: TCPv4_SERVER link remote: [undef]<\/span>
\u00a08\u6708 16 11:49:11 xxxxx.sytes.net openvpn[1935]: MULTI: multi_init called, r=256 v=256<\/span>
\u00a08\u6708 16 11:49:11 xxxxx.sytes.net openvpn[1935]: IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0<\/span>
\u00a08\u6708 16 11:49:11 xxxxx.sytes.net openvpn[1935]: IFCONFIG POOL LIST<\/span>
\u00a08\u6708 16 11:49:11 xxxxx.sytes.net openvpn[1935]: MULTI: TCP INIT maxclients=10 maxevents=14<\/span>
\u00a08\u6708 16 11:49:11 xxxxx.sytes.net openvpn[1935]: Initialization Sequence Completed<\/span><\/p>\n

\u56e0\u70ba \/etc\/openvpn\/server.conf<\/span> \u662f\u6211\u76f4\u63a5\u8907\u88fd\u5225\u53f0\u4fee\u6539\u597d\u7684\u8a2d\u5b9a\u6a94\uff0c\u6240\u4ee5\u624d\u6703\u51fa\u73fe\u9019\u6a23\u7684\u554f\u984c\uff0c\u4e5f\u63d0\u9192\u81ea\u5df1\u4f7f\u7528 SELinux \u61c9\u8a72\u6ce8\u610f\u7684\u4e8b\u9805\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

1. \u5b89\u88dd\u53ca\u4fee\u6539\u5b8c OpenVPN\uff0c\u8981\u555f\u52d5\u6642\uff0c\u537b\u51fa\u73fe\u932f\u8aa4\u00a0# systemctl start openvpn@ … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008OpenVPN \u7121\u6cd5\u6b63\u5e38\u555f\u52d5\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[117,168,136],"tags":[],"class_list":["post-19284","post","type-post","status-publish","format-standard","hentry","category-c-78462","category-c-84780","category-c-78481"],"meta_key":{"_pingme":["1"],"_encloseme":["1"],"lt_post_id":["650620"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19284"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=19284"}],"version-history":[{"count":0,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19284\/revisions"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=19284"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=19284"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=19284"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}