Error: Invalid prefix for given prefix length.

[sarkye]

I have no clue where to look anymore, changed the LOCAL_NETWORK settings already multible times, tried /23 and /24 also.
my local network is 192.168.1.0, but by pi is the dns server maybe i need to change something ?

I'm completly in the dark here..

Starting container with revision: b33d0fe
Creating TUN device /dev/net/tun
Using OpenVPN provider: SURFSHARK
Running with VPN_CONFIG_SOURCE auto
No bundled config script found for SURFSHARK. Defaulting to external config
Downloading configs from https://github.com/haugene/vpn-configs-contrib/archive/main.zip into /tmp/tmp.9rmWDuvQ3G
Extracting configs to /tmp/tmp.CW7K05mUbk
Found configs for SURFSHARK in /tmp/tmp.CW7K05mUbk/vpn-configs-contrib-main/openvpn/surfshark, will replace current content in /etc/openvpn/surfshark
Cleanup: deleting /tmp/tmp.9rmWDuvQ3G and /tmp/tmp.CW7K05mUbk
Starting OpenVPN using config nl-ams.prod.surfshark.com_udp.ovpn
Modifying /etc/openvpn/surfshark/nl-ams.prod.surfshark.com_udp.ovpn for best behaviour in this container
Modification: Point auth-user-pass option to the username/password file
Modification: Change ca certificate path
Modification: Change ping options
Modification: Update/set resolv-retry to 15 seconds
Modification: Change tls-crypt keyfile path
Modification: Set output verbosity to 3
Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop
Modification: Updating status for config failure detection
Setting OpenVPN credentials...
adding route to local network 192.168.1.0/16 via 172.20.0.1 dev eth0
Error: Invalid prefix for given prefix length.

[pkishino]

so, if you lookup network CIDR prefixes/subnetting you would see that 192.168.1.0/16 is invalid ..either set 192.168.0.0/16 OR 192.168.1.0/24
https://haugene.github.io/docker-transmission-openvpn/run-container/#3_you_might_not_be_able_to_access_the_web_ui_on_the_first_try

[sarkye]

Also tried that, but then i get still a error.

Setting OpenVPN credentials... adding route to local network 192.168.1.0/24 via 172.20.0.1 dev eth0 Options error: the --route-pre-down directive should have at most 1 parameter. To pass a list of arguments as one of the parameters, try enclosing them in double quotes (""). Use --help for more information.

[pkishino]

Yes, but that is a different error..
Please show your whole config, send you are providing a list of values for one of the openvpn parameters

[sarkye]

CREATE_TUN_DEVICE | true
DROP_DEFAULT_ROUTE |  
ENABLE_UFW | false
GLOBAL_APPLY_PERMISSIONS | true
HEALTH_CHECK_HOST | google.com
LOCAL_NETWORK | 192.168.1.0/24
LOG_TO_STDOUT | false
OPENVPN_CONFIG | nl-ams.prod.surfshark.com_udp
OPENVPN_OPTS | --inactive 3600 --ping 10 --ping-exit 60
OPENVPN_PASSWORD | ******
OPENVPN_PROVIDER | SURFSHARK
OPENVPN_USERNAME | *****
PATH | /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
PEER_DNS | true
PEER_DNS_PIN_ROUTES | true
PGID |  
PUID |  
REVISION | b33d0fe
SELFHEAL | false
TRANSMISSION_DOWNLOAD_DIR | /data/completed
TRANSMISSION_HOME | /config/transmission-home
TRANSMISSION_INCOMPLETE_DIR | /data/incomplete
TRANSMISSION_RPC_PASSWORD | test
TRANSMISSION_RPC_PORT | 9091
TRANSMISSION_RPC_USERNAME | test
TRANSMISSION_WATCH_DIR | /data/watch
UFW_ALLOW_GW_NET | false
UFW_DISABLE_IPTABLES_REJECT | false
UFW_EXTRA_PORTS |  
WEBPROXY_ENABLED | false
WEBPROXY_PASSWORD |  
WEBPROXY_PORT | 8118
WEBPROXY_USERNAME

Changed: OPENVPN_OPTS | --inactive 3600 --ping 10 --ping-exit 60 --> solved the error

[sarkye]

Following error now, know 100% Username and password are correct:

2023-01-13 10:31:10 SENT CONTROL [nl-ams-v091.prod.surfshark.com]: 'PUSH_REQUEST' (status=1)
2023-01-13 10:31:10 SIGTERM[soft,auth-failure] received, process exiting
Setting OpenVPN credentials...
2023-01-13 10:31:05 SENT CONTROL [nl-ams-v091.prod.surfshark.com]: 'PUSH_REQUEST' (status=1)
2023-01-13 10:31:10 AUTH: Received control message: AUTH_FAILED
2023-01-13 10:31:03 [nl-ams-v091.prod.surfshark.com] Peer Connection Initiated with [AF_INET]143.244.42.74:1194
2023-01-13 10:31:03 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2023-01-13 10:31:03 WARNING: 'auth' is used inconsistently, local='auth SHA512', remote='auth [null-digest]'
2023-01-13 10:31:03 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1633', remote='link-mtu 1581'
2023-01-13 10:31:03 VERIFY OK: depth=0, CN=nl-ams-v091.prod.surfshark.com
2023-01-13 10:31:03 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2023-01-13 10:31:03 Validating certificate extended key usage
2023-01-13 10:31:03 VERIFY EKU OK
2023-01-13 10:31:03 VERIFY KU OK
2023-01-13 10:31:03 VERIFY OK: depth=2, C=VG, O=Surfshark, CN=Surfshark Root CA
2023-01-13 10:31:03 VERIFY OK: depth=1, C=VG, O=Surfshark, CN=Surfshark Intermediate CA
2023-01-13 10:31:03 TLS: Initial packet from [AF_INET]143.244.42.74:1194, sid=5d91de01 51b6fe2b
2023-01-13 10:31:03 UDP link remote: [AF_INET]143.244.42.74:1194
2023-01-13 10:31:03 UDP link local: (not bound)
2023-01-13 10:31:03 Socket Buffers: R=[212992->212992] S=[212992->212992]
2023-01-13 10:31:03 TCP/UDP: Preserving recently used remote address: [AF_INET]143.244.42.74:1194
2023-01-13 10:31:03 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2023-01-13 10:31:03 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2023-01-13 10:31:03 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2023-01-13 10:31:02 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10
2023-01-13 10:31:02 OpenVPN 2.5.5 aarch64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 14 2022
2023-01-13 10:31:02 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
adding route to local network 192.168.1.0/24 via 172.20.0.1 dev eth0

[sarkye]

I do have !, as a character in my password, could this be the issue ?

[ilike2burnthing]

Easy way to find out...