Bug 10323 - OpenVPN: Green route not added. core 66 (and 65?)
Summary: OpenVPN: Green route not added. core 66 (and 65?)
Alias: None
Product: IPFire
Classification: Unclassified
Component: openvpn (show other bugs)
Version: 2
Hardware: i686 Unspecified
: Will only affect a few users Minor Usability
Assignee: Stefan Schantl
QA Contact:
Depends on:
Reported: 2013-02-28 20:53 UTC by Tobias Meyer
Modified: 2014-01-12 20:31 UTC (History)
2 users (show)

See Also:


Note You need to log in before you can comment on or make changes to this bug.
Description Tobias Meyer 2013-02-28 20:53:09 UTC
In /srv/web/ipfire/cgi-bin/ovpnmain.cgi the line 355 has been commented out, so the route to the green interface is no longer pushed.

Additionally I cannot add the green interface to the routes in "advanced server options" because it gives the error message "Route for green network is always set"

This renders OpenVPN unfunctional unless people manually add the route.
Comment 1 Tobias Meyer 2013-02-28 21:02:06 UTC
I just found the extra files in the ccd subdirectory.

But they are not used when I log in.

I suspect an issue with blanks in the directory structure, because the one person without blank between firstname and lastname did not report problems.

Structure of the files is:

[root@router ovpn]# ls -al /var/ipfire/ovpn/ccd
-rw-r--r-- 1 nobody nobody  188 2013-02-04 07:46 Firstname Lastname
-rw-r--r-- 1 nobody nobody  188 2013-02-04 07:46 OtherUser

User "Lastname Firstname" does not work
User "OtherUser" did not report problems
Comment 2 Tobias Meyer 2013-02-28 21:16:58 UTC

Fixed the issue by manually going into each user (edit) and saving.

This populated the /var/ipfire/ovpn/ccdroute2 file and created some new files in /var/ipfire/ovpn/ccd (this time with "Firstname_Lastname" instead of "Firstname Lastname")

I can now connect even with line 355 commented out.
Comment 3 Michael Tremer 2013-03-01 13:59:41 UTC
Just to make it clear to me? What changes do you think need to be done in IPFire - if any?
Comment 4 Tobias Meyer 2013-03-01 14:46:27 UTC
Either one of:

1) The upgrade process would need to be patched, so people comming from earlier core versions will not be affected - may bee too late for that.

2) There should probably be a post-install script in one of the next core versions that automatically "re-saves" all persons in the openvpn list to fix the problem

Also: Some easy to find info about how to fix it.

I am a little confused that this did not hit more people - I would have suspected a bigger wave. We run a pretty basic setting and it simply broke for us by updating.
Maybe it is only triggered once the openvpn page is loaded or something in the server settings is changed - without editing the users.
Maybe we are the only ones having the real name with spaces in the user's remarks...
Comment 6 Stefan Schantl 2014-01-12 16:27:08 UTC
Fix (Testversion of Core 75) can be found in the Testing Tree.

Please test and report any problem or errors.

Thanks in advance.

Comment 7 Stefan Schantl 2014-01-12 20:26:03 UTC
Fix has been released with Core Update 75.