ALT Linux Community general discussions
 help / color / mirror / Atom feed
* [Comm] openvpn + systemd + ask password
@ 2016-06-18 17:23 Michael A. Kangin
  2016-06-18 18:22 ` Michael A. Kangin
  0 siblings, 1 reply; 2+ messages in thread
From: Michael A. Kangin @ 2016-06-18 17:23 UTC (permalink / raw)
  To: ALT Linux Community general discussions

Добрый день.

А как правильно нужно пользовался openvpn с systemd-ask-password?
Сейчас конфигурация, использующая запароленный сертификат, отказывается 
стартовать из-под systemd:

-- Unit openvpn-client@my.service has begun starting up.
Jun 18 19:06:15 mak-ws openvpn[12225]: OpenVPN 2.3.7 
x86_64-alt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on 
Jun 17 2016
Jun 18 19:06:15 mak-ws openvpn[12225]: library versions: OpenSSL 1.0.1t 
3 May 2016, LZO 2.06
Jun 18 19:06:15 mak-ws systemd[1]: PID file 
/var/run/openvpn/client_my.pid not readable (yet?) after start.
Jun 18 19:06:15 mak-ws openvpn[12226]: WARNING: this configuration may 
cache passwords in memory -- use the auth-nocache option to prevent this
Jun 18 19:06:15 mak-ws openvpn[12226]: Error: private key password 
verification failed
Jun 18 19:06:15 mak-ws openvpn[12226]: Exiting due to fatal error
Jun 18 19:06:15 mak-ws systemd[1]: openvpn-client@my.service never wrote 
its PID file. Failing.
Jun 18 19:06:15 mak-ws systemd[1]: Failed to start OpenVPN tunnel for my.
-- Subject: Unit openvpn-client@my.service has failed

Попытки погуглить приводят к мысли, что openvpn должна как-то сама уметь 
им пользоваться, а то что у нас не умеет, это возможно баг.


^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2016-06-18 18:22 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-06-18 17:23 [Comm] openvpn + systemd + ask password Michael A. Kangin
2016-06-18 18:22 ` Michael A. Kangin

ALT Linux Community general discussions

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://lore.altlinux.org/community/0 community/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 community community/ http://lore.altlinux.org/community \
		mandrake-russian@linuxteam.iplabs.ru community@lists.altlinux.org community@lists.altlinux.ru community@lists.altlinux.com
	public-inbox-index community

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://lore.altlinux.org/org.altlinux.lists.community


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git