Notices

Hmm, I think you get this error because you don't have Bash installed which the script requires, and Busybox /bin/sh is not compatible with Bash scripts.

Therefore you must install Bash from Application Manager.

After installed, from x-term execute:

$ whereis bash

Now you know where bash is located (probably either /bin/bash or /usr/bin/bash ...) now edit /etc/openvpn/update-resolv-conf and make sure on top to replace whatever it says to

#!/path/to/bash

Where /path/to/bash is what whereis told you.

PS: Whatever was the result of the host and ping commands?

I installed bash, but the the whereis command comes up empty. I even went into root and did whereis bash. They both say "not found"

Try this

$ ls -l /bin/bash* /usr/bin/bash* /usr/local/bin/bash*

or

$ dpkg -L bash | grep bin/

using "$ dpkg -L bash | grep bin/ " it listed /usr/bin/bash-setup. So is /usr/bin the path. I cd to the location then did "ls bash" and it still said "no such file or directory".

bash-setup is probably a post-installation script. Sounds like a strange way to set up a debian package. Someone who is familiar with this package will have to tell you how to fix that. It could be as simple as entering /usr/bin/bash-setup and see what it does. But on your own risk.

Hey mikkov,
Any chance you might know why I can view Jaiku but not twitter in my Ivacy config in openvpn? It was working, but then I tethered to my cell and it stopped working. Now I'm back on wifi and it still won't work but Jaiku does.

Well, it's really hard to say. But it seems that the twitter ip you had is in Beijing so, so it's probably a dns issue as others have said.

Latest openvpn package for maemo comes with it's own update-resolv-conf. You could try the following config. Note that I have no idea if it works or not.


client
dev tun
proto udp
remote openvpn.ivacy.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ns-cert-type server
comp-lzo
verb 3
auth-user-pass
script-security 3
reneg-sec 0
redirect-gateway def1
up /etc/openvpn/maemo-update-resolvconf
plugin /usr/lib/openvpn/openvpn-down-root.so "script_type=down /etc/openvpn/maemo-update-resolvconf"
ca ivacy-ca.crt
cert ivacy-client.crt
key ivacy-client.key
tls-auth ivacy-tls.key 1

when importing the config file it says "Files not found: /etc/openvpn/maemo-update-resolvconf" . Am I missing that file? Do I just need to get that file and upload it?

It 's not working. here is the test log:
Wed Oct 21 08:00:26 2009 OpenVPN 2.1_rc19 arm-unknown-linux-gnueabi [SSL] [LZO2] [EPOLL] built on Sep 7 2009
Enter Auth Username:Enter Auth Password:Wed Oct 21 08:00:26 2009 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Oct 21 08:00:26 2009 PLUGIN_INIT: POST /usr/lib/openvpn/openvpn-down-root.so '[/usr/lib/openvpn/openvpn-down-root.so] [script_type=down] [/etc/openvpn/maemo-update-resolvconf]' intercepted=PLUGIN_UP|PLUGIN_DOWN
Wed Oct 21 08:00:26 2009 /usr/bin/openssl-vulnkey -q -b 2048 -m <modulus omitted>
Wed Oct 21 08:00:26 2009 ******* WARNING *******: '(null)' is a known vulnerable key. See 'man openvpn-vulnkey' for details.
Wed Oct 21 08:00:26 2009 WARNING: file 'ivacy-tls.key' is group or others accessible
Wed Oct 21 08:00:26 2009 Control Channel Authentication: using 'ivacy-tls.key' as a OpenVPN static key file
Wed Oct 21 08:00:26 2009 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 21 08:00:26 2009 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 21 08:00:26 2009 LZO compression initialized
Wed Oct 21 08:00:26 2009 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Wed Oct 21 08:00:27 2009 RESOLVE: NOTE: openvpn.ivacy.com resolves to 3 addresses, choosing one by random
Wed Oct 21 08:00:27 2009 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Oct 21 08:00:27 2009 Local Options hash (VER=V4): '504e774e'
Wed Oct 21 08:00:27 2009 Expected Remote Options hash (VER=V4): '14168603'
Wed Oct 21 08:00:27 2009 Socket Buffers: R=[105472->131072] S=[105472->131072]
Wed Oct 21 08:00:27 2009 UDPv4 link local: [undef]
Wed Oct 21 08:00:27 2009 UDPv4 link remote: 85.249.223.29:1194
Wed Oct 21 08:00:27 2009 TLS: Initial packet from 85.249.223.29:1194, sid=787482eb 0030aab8
Wed Oct 21 08:00:27 2009 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Oct 21 08:00:32 2009 VERIFY OK: depth=1, /C=RU/ST=MR/L=Moscow/O=ivacy.com/CN=ivacy.com_CA/emailAddress=admin@ivacy.com
Wed Oct 21 08:00:32 2009 VERIFY OK: nsCertType=SERVER
Wed Oct 21 08:00:32 2009 VERIFY OK: depth=0, /C=RU/ST=MR/L=Moscow/O=ivacy.com/CN=openvpn.ivacy.com/emailAddress=admin@ivacy.com
Wed Oct 21 08:00:39 2009 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Oct 21 08:00:39 2009 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 21 08:00:39 2009 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Oct 21 08:00:39 2009 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 21 08:00:39 2009 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Oct 21 08:00:39 2009 [openvpn.ivacy.com] Peer Connection Initiated with 85.249.223.29:1194
Wed Oct 21 08:00:40 2009 SENT CONTROL [openvpn.ivacy.com]: 'PUSH_REQUEST' (status=1)
Wed Oct 21 08:00:40 2009 PUSH: Received control message: 'PUSH_REPLY,route 1.0.0.0 255.0.0.0,dhcp-option DNS 1.254.2.2,dhcp-option DNS 1.254.2.3,dhcp-option DOMAIN vpn,explicit-exit-notify 2,route-gateway 1.2.116.1,topology subnet,ping 10,ping-restart 60,ifconfig 1.2.116.119 255.255.252.0'
Wed Oct 21 08:00:40 2009 OPTIONS IMPORT: timers and/or timeouts modified
Wed Oct 21 08:00:40 2009 OPTIONS IMPORT: explicit notify parm(s) modified
Wed Oct 21 08:00:40 2009 OPTIONS IMPORT: --ifconfig/up options modified
Wed Oct 21 08:00:40 2009 OPTIONS IMPORT: route options modified
Wed Oct 21 08:00:40 2009 OPTIONS IMPORT: route-related options modified
Wed Oct 21 08:00:40 2009 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Oct 21 08:00:40 2009 ROUTE default_gateway=192.168.15.1
Wed Oct 21 08:00:40 2009 TUN/TAP device tun0 opened
Wed Oct 21 08:00:40 2009 TUN/TAP TX queue length set to 100
Wed Oct 21 08:00:40 2009 /sbin/ifconfig tun0 1.2.116.119 netmask 255.255.252.0 mtu 1500 broadcast 1.2.119.255
Wed Oct 21 08:00:41 2009 PLUGIN_CALL: POST /usr/lib/openvpn/openvpn-down-root.so/PLUGIN_UP status=0
Wed Oct 21 08:00:41 2009 /etc/openvpn/maemo-update-resolvconf tun0 1500 1542 1.2.116.119 255.255.252.0 init
Wed Oct 21 08:00:41 2009 script failed: could not execute external program
Wed Oct 21 08:00:41 2009 Exiting

HI all!
I think it's necessary to post wiki page about openvpn setup.
I have the same problems with openvpn setup.
My question Is it necessary to use option "auth-user-pass" with openvpn desktop applet?

Forget my previous post. Option "askpass" works well for me.