[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

[Openvpn-users] chroot and tls-verify option


  • Subject: [Openvpn-users] chroot and tls-verify option
  • From: Felix Brack <fb@xxxxxxx>
  • Date: Tue, 4 Oct 2005 10:57:00 +0200

Hallo,

I use Open VPN (version 2.0.2) as server on a linux box. Everything
works fine (including tls-verify option) when I do not chroot. Using
chroot I get 'Verify command failed to execute' each time a client
tries to connect to the server.
To track down the error I use a very simple (useless) bash script for
the tls-verify command, containing the following code:

#!/bin/bash
exit 0

In the /bin subdirectory of my chroot environment I have a statically
linked bash which is working. Open VPN correctly changes to the new
root and then runs as 'nobody/nogroup'. I double checked the
attributes of the the files /bin/bash and /test (in chroot
environment) and can not find any error.

When I enter 'chroot /usr/local/etc/openvpn /test' as root manually
everything is fine (/usr/local/etc/openvpn is the jail).

Any idea why Open VPN still fails to execute my tls-verify script in
chroot?

many thanks

-------------------------

Felix





____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users