Cyberghost working no file found error #2542

Rgthom · 2023-03-04T01:48:10Z

Rgthom
Mar 4, 2023

Apologies for error in title.

I can't seem to get Cyberghost working through OpenVPN.

I run the container using:

docker run -d \
    --name=transmission-openvpn \
    --cap-add=NET_ADMIN \
    -e OPENVPN_PROVIDER=custom \
    -e OPENVPN_CONFIG=default \
    -e OPENVPN_USERNAME=_user_\
    -e OPENVPN_PASSWORD=_password_ \
    -e WEBPROXY_ENABLED=false \
    -p 9091:9091 \
    -e CREATE_TUN_DEVICE=true \
    -v /home/rick/dockerconfigs/transmission_o_vpn/config:/etc/openvpn/custom \
    -v /home/rick/media/downloads:/downloads \
    --log-driver json-file \
    --log-opt max-size=10m \
    haugene/transmission-openvpn

User and password obviously replaced.

There error message

 Creating TUN device /dev/net/tun
 Using OpenVPN provider: CUSTOM
 Running with VPN_CONFIG_SOURCE auto
 CUSTOM provider specified but not using default.ovpn, will try to find a valid config mounted to /etc/openvpn/custom
 Starting OpenVPN using config default.ovpn
 Modifying /etc/openvpn/custom/default.ovpn for best behaviour in this container
 Modification: Point auth-user-pass option to the username/password file
 Modification: Change ca certificate path
 Modification: Change ping options
 Modification: Update/set resolv-retry to 15 seconds
 Modification: Change tls-crypt keyfile path
 Modification: Set output verbosity to 3
 Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop
 Modification: Updating status for config failure detection
 Setting OpenVPN credentials...
 2023-03-04 01:38:26 DEPRECATED OPTION: ncp-disable. Disabling cipher negotiation is a deprecated debug feature that will be removed in OpenVPN 2.6
 2023-03-04 01:38:26 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
 Options error: --cert fails with 'client.crt': No such file or directory (errno=2)
 2023-03-04 01:38:26 WARNING: cannot stat file 'client.key': No such file or directory (errno=2)
 Options error: --key fails with 'client.key': No such file or directory (errno=2)
 Options error: Please correct these errors.
 Use --help for more information.

Not sure if I need to change auth-user-pass in default.ovpn

Ubuntu folder structure:

|__dockerconfigs/transmission_o_vpn/config
        |___default.ovpn
        |___client.key
        |___client.crt
        |___ca.crt

Really can't figure out what I've got set wrong. Any help would be super appreciated. Many thanks

Answered by Rgthom

Mar 4, 2023

Really confused. Maybe I'm calculating the address wrong with the calculator. I'm finding that particular section of the docs a little confusing. Sorry.

View full answer

pkishino · 2023-03-04T05:55:27Z

pkishino
Mar 4, 2023
Collaborator

missing config/ Mount, see readme.. this was changed a while back
check permissions
try different branch than latest.. like :dev

0 replies

Rgthom · 2023-03-04T09:46:57Z

Rgthom
Mar 4, 2023
Author

Thanks for your response. I've tried both both latest and dev. I'm still getting the same issues. I've added the config/ mount now. Not sure if I'm placing the files in the wrong place.

docker run -d \
    --name transmission-openvpn \
    --cap-add=NET_ADMIN \
    -e OPENVPN_PROVIDER=custom \
    -e OPENVPN_CONFIG=default \
    -e OPENVPN_USERNAME=user\
    -e OPENVPN_PASSWORD=password \
    -e WEBPROXY_ENABLED=false \
    -e CREATE_TUN_DEVICE=true \
    -p 9091:9091 \
    -v /home/rick/dockerconfigs/transmission_o_vpn/config:/config \
    -v /home/rick/dockerconfigs/transmission_o_vpn/config:/etc/openvpn/custom \
    -v /home/rick/media/downloads:/downloads \
    --log-driver json-file \
    --log-opt max-size=10m \
    haugene/transmission-openvpn

Where do these files need to be? I have them here: /home/rick/dockerconfigs/transmission_o_vpn/config_

The tail of the error still seems to be options no such filer or directory.

Starting container with revision: b33d0fe4c938259a0d4eb844e55468f387456121
 Creating TUN device /dev/net/tun
 Using OpenVPN provider: CUSTOM
 Modifying /etc/openvpn/custom/default.ovpn for best behaviour in this container
 Modification: Point auth-user-pass option to the username/password file
 Modification: Change ca certificate path
 Modification: Change ping options
 Modification: Update/set resolv-retry to 15 seconds
 Modification: Change tls-crypt keyfile path
 Modification: Set output verbosity to 3
 Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop
 Modification: Updating status for config failure detection
 Setting OpenVPN credentials...
 2023-03-04 09:34:44 DEPRECATED OPTION: ncp-disable. Disabling cipher negotiation is a deprecated debug feature that will be removed in OpenVPN 2.6
 2023-03-04 09:34:44 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
 Options error: --cert fails with 'client.crt': No such file or directory (errno=2)
 2023-03-04 09:34:44 WARNING: cannot stat file 'client.key': No such file or directory (errno=2)
 Options error: --key fails with 'client.key': No such file or directory (errno=2)
 Options error: Please correct these errors.
 Use --help for more information.

But it's still not finding. I've really opened up the permissions just to get this working. As far as I can tell.

Thanks for your help. I'm new to this.

0 replies

Rgthom · 2023-03-04T10:20:16Z

Rgthom
Mar 4, 2023
Author

So. I managed to get the container running. I had to set the absolute paths in the default.ovpn file for the

client.crt 
client.key

The container runs successfully. but I can not access via the web browser. It just keeps trying to load.

0 replies

Rgthom · 2023-03-04T10:40:17Z

Rgthom
Mar 4, 2023
Author

Logs:

docker logs --details transmission-openvpn
 Starting container with revision: b33d0fe4c938259a0d4eb844e55468f387456121
 Creating TUN device /dev/net/tun
 Using OpenVPN provider: CUSTOM
 Modifying /etc/openvpn/custom/default.ovpn for best behaviour in this container
 Modification: Point auth-user-pass option to the username/password file
 Modification: Change ca certificate path
 Modification: Change ping options
 Modification: Update/set resolv-retry to 15 seconds
 Modification: Change tls-crypt keyfile path
 Modification: Set output verbosity to 3
 Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop
 Modification: Updating status for config failure detection
 Setting OpenVPN credentials...
 2023-03-04 10:15:34 DEPRECATED OPTION: ncp-disable. Disabling cipher negotiation is a deprecated debug feature that will be removed in OpenVPN 2.6
 2023-03-04 10:15:34 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
 2023-03-04 10:15:34 WARNING: file '/etc/openvpn/custom/client.key' is group or others accessible
 2023-03-04 10:15:34 OpenVPN 2.5.5 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 14 2022
 2023-03-04 10:15:34 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10
 2023-03-04 10:15:34 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
 2023-03-04 10:15:36 TCP/UDP: Preserving recently used remote address: [AF_INET]188.241.82.136:443
 2023-03-04 10:15:36 Socket Buffers: R=[212992->212992] S=[212992->212992]
 2023-03-04 10:15:36 UDP link local: (not bound)
 2023-03-04 10:15:36 UDP link remote: [AF_INET]188.241.82.136:443
 2023-03-04 10:15:36 TLS: Initial packet from [AF_INET]188.241.82.136:443, sid=7d5e4c0a 7149854a
 2023-03-04 10:15:36 VERIFY OK: depth=1, C=RO, L=Bucharest, O=CyberGhost S.A., CN=CyberGhost Root CA, [email protected]
 2023-03-04 10:15:36 VERIFY KU OK
 2023-03-04 10:15:36 Validating certificate extended key usage
 2023-03-04 10:15:36 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
 2023-03-04 10:15:36 VERIFY EKU OK
 2023-03-04 10:15:36 VERIFY OK: depth=0, CN=andorra-rack402.nodes.gen4.ninja
 2023-03-04 10:15:36 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1569', remote='link-mtu 1553'
 2023-03-04 10:15:36 WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128'
 2023-03-04 10:15:36 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 4096 bit RSA, signature: RSA-SHA256
 2023-03-04 10:15:36 [andorra-rack402.nodes.gen4.ninja] Peer Connection Initiated with [AF_INET]188.241.82.136:443
 2023-03-04 10:15:36 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,route-ipv6 2000::/3,dhcp-option DNS 10.0.0.243,route-gateway 10.5.4.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.5.4.59 255.255.255.0,peer-id 4'
 2023-03-04 10:15:36 Options error: option 'redirect-gateway' cannot be used in this context ([PUSH-OPTIONS])
 2023-03-04 10:15:36 Options error: option 'route-ipv6' cannot be used in this context ([PUSH-OPTIONS])
 2023-03-04 10:15:36 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
 2023-03-04 10:15:36 OPTIONS IMPORT: timers and/or timeouts modified
 2023-03-04 10:15:36 OPTIONS IMPORT: --ifconfig/up options modified
 2023-03-04 10:15:36 OPTIONS IMPORT: route-related options modified
 2023-03-04 10:15:36 OPTIONS IMPORT: peer-id set
 2023-03-04 10:15:36 OPTIONS IMPORT: adjusting link_mtu to 1624
 2023-03-04 10:15:36 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
 2023-03-04 10:15:36 Outgoing Data Channel: Using 256 bit message hash 'SHA256' for HMAC authentication
 2023-03-04 10:15:36 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
 2023-03-04 10:15:36 Incoming Data Channel: Using 256 bit message hash 'SHA256' for HMAC authentication
 2023-03-04 10:15:36 net_route_v4_best_gw query: dst 0.0.0.0
 2023-03-04 10:15:36 net_route_v4_best_gw result: via 172.17.0.1 dev eth0
 2023-03-04 10:15:36 ROUTE_GATEWAY 172.17.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:11:00:02
 2023-03-04 10:15:36 TUN/TAP device tun0 opened
 2023-03-04 10:15:36 net_iface_mtu_set: mtu 1500 for tun0
 2023-03-04 10:15:36 net_iface_up: set tun0 up
 2023-03-04 10:15:36 net_addr_v4_add: 10.5.4.59/24 dev tun0
 2023-03-04 10:15:41 net_route_v4_add: 188.241.82.136/32 via 172.17.0.1 dev [NULL] table 0 metric -1
 2023-03-04 10:15:41 net_route_v4_add: 0.0.0.0/1 via 10.5.4.1 dev [NULL] table 0 metric -1
 2023-03-04 10:15:41 net_route_v4_add: 128.0.0.0/1 via 10.5.4.1 dev [NULL] table 0 metric -1
 Up script executed with device=tun0 ifconfig_local=10.5.4.59
 Updating TRANSMISSION_BIND_ADDRESS_IPV4 to the ip of tun0 : 10.5.4.59
 
 -------------------------------------
 Transmission will run as
 -------------------------------------
 User name:   root
 User uid:    0
 User gid:    0
 -------------------------------------
 
 Updating Transmission settings.json with values from env variables
 Attempting to use existing settings.json for Transmission
 Could not read existing settings.json. Generating settings.json for Transmission from environment and defaults /etc/transmission/default-settings.json
 Overriding bind-address-ipv4 because TRANSMISSION_BIND_ADDRESS_IPV4 is set to 10.5.4.59
 Overriding download-dir because TRANSMISSION_DOWNLOAD_DIR is set to /data/completed
 Overriding incomplete-dir because TRANSMISSION_INCOMPLETE_DIR is set to /data/incomplete
 Overriding rpc-password because TRANSMISSION_RPC_PASSWORD is set to [REDACTED]
 Overriding rpc-port because TRANSMISSION_RPC_PORT is set to 9091
 Overriding rpc-username because TRANSMISSION_RPC_USERNAME is set to 
 Overriding watch-dir because TRANSMISSION_WATCH_DIR is set to /data/watch
 sed'ing True to true
 STARTING TRANSMISSION
 Transmission startup script complete.
 2023-03-04 10:15:41 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
 2023-03-04 10:15:41 Initialization Sequence Completed

1 reply

pkishino Mar 4, 2023
Collaborator

That’s because you haven’t set LOCAL_NETWORK variable.. please read the documentation

Rgthom · 2023-03-04T11:23:57Z

Rgthom
Mar 4, 2023
Author

Thanks. I've gone through that and calculated my ip range using the subnet calc for the LOCAL_NETWORK variable I've added the variable but it still doesn't work.

docker run -d \
  --name transmission-openvpn \
  --cap-add=NET_ADMIN \
  -e OPENVPN_PROVIDER=custom \
  -e OPENVPN_CONFIG=default \
  -e OPENVPN_USERNAME=SynV5beiyg \
  -e OPENVPN_PASSWORD=Q3Tih4NxVG \
  -e WEBPROXY_ENABLED=false \
  -e CREATE_TUN_DEVICE=true \
  -e LOCAL_NETWORK=192.168.1.119/32\
  -p 9091:9091 \
  -v /home/rick/dockerconfigs/transmission_o_vpn/config:/config \
  -v /home/rick/dockerconfigs/transmission_o_vpn/config:/etc/openvpn/custom \
  -v /home/rick/media/downloads:/downloads \
  --log-driver json-file \
  --log-opt max-size=10m \
  haugene/transmission-openvpn

0 replies

Rgthom · 2023-03-04T11:30:36Z

Rgthom
Mar 4, 2023
Author

Really confused. Maybe I'm calculating the address wrong with the calculator. I'm finding that particular section of the docs a little confusing. Sorry.

1 reply

pkishino Mar 4, 2023
Collaborator

Try 192.168.1.0/24

Rgthom · 2023-03-04T11:53:08Z

Rgthom
Mar 4, 2023
Author

That's working now. Thank you very much for your help.

0 replies

Uh oh!

Cyberghost working no file found error #2542

Uh oh!

Uh oh!

Rgthom Mar 4, 2023

Replies: 7 comments · 2 replies

Uh oh!

Uh oh!

pkishino Mar 4, 2023 Collaborator

Uh oh!

Uh oh!

Rgthom Mar 4, 2023 Author

Uh oh!

Uh oh!

Rgthom Mar 4, 2023 Author

Uh oh!

Rgthom Mar 4, 2023 Author

Uh oh!

pkishino Mar 4, 2023 Collaborator

Uh oh!

Rgthom Mar 4, 2023 Author

Uh oh!

Rgthom Mar 4, 2023 Author

Uh oh!

pkishino Mar 4, 2023 Collaborator

Uh oh!

Rgthom Mar 4, 2023 Author

Rgthom
Mar 4, 2023

Replies: 7 comments 2 replies

pkishino
Mar 4, 2023
Collaborator

Rgthom
Mar 4, 2023
Author

Rgthom
Mar 4, 2023
Author

Rgthom
Mar 4, 2023
Author

pkishino Mar 4, 2023
Collaborator

Rgthom
Mar 4, 2023
Author

Rgthom
Mar 4, 2023
Author

pkishino Mar 4, 2023
Collaborator

Rgthom
Mar 4, 2023
Author