[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] chroot and tls-verify option


  • Subject: Re: [Openvpn-users] chroot and tls-verify option
  • From: Felix Brack <fb@xxxxxxx>
  • Date: Thu, 6 Oct 2005 09:27:44 +0200

This was not a problem of OpenVPN, just a stupid mistake on my part: I
forgot to add the symbolic link sh that links to the bash in the root
jail. Now everything works fine.

-------------------------

Felix

Felix Brack wrote:

FB> Hallo,

FB> I use Open VPN (version 2.0.2) as server on a linux box. Everything
FB> works fine (including tls-verify option) when I do not chroot. Using
FB> chroot I get 'Verify command failed to execute' each time a client
FB> tries to connect to the server.
FB> To track down the error I use a very simple (useless) bash script for
FB> the tls-verify command, containing the following code:

FB> #!/bin/bash
FB> exit 0

FB> In the /bin subdirectory of my chroot environment I have a statically
FB> linked bash which is working. Open VPN correctly changes to the new
FB> root and then runs as 'nobody/nogroup'. I double checked the
FB> attributes of the the files /bin/bash and /test (in chroot
FB> environment) and can not find any error.

FB> When I enter 'chroot /usr/local/etc/openvpn /test' as root manually
FB> everything is fine (/usr/local/etc/openvpn is the jail).

FB> Any idea why Open VPN still fails to execute my tls-verify script in
FB> chroot?

FB> many thanks

FB> -------------------------

FB> Felix






FB> -------------------------------------------------------
FB> This SF.Net email is sponsored by:
FB> Power Architecture Resource Center: Free content, downloads, discussions,
FB> and more. http://solutions.newsforge.com/ibmarch.tmpl
FB> _______________________________________________
FB> Openvpn-users mailing list
FB> Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
FB> https://lists.sourceforge.net/lists/listinfo/openvpn-users






____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users