[justDIY]

I'm trying to get openvpn client going ... the remote server requires

cipher DES-EDE-CBC

so I followed the wiki in regards to a custom configuration file ... I copy and pasted the example, changed things to be correct, and hit save startup

the router reboots, openvpn connects, but fails to open a tunnel ... cipher failed

checking /tmp/openvpn/openvpn.conf, I see the default configuration file, not the one echo'd by the startup script

[justDIY]

any ideas anyone?

[Blackraven]

cipher DES-EDE3-CBC -> Triple-DES

so it looks like you forgot to key in a '3' ?

[justDIY]

the contents of the file aren't at issue, please read the original post:

for whatever reason, the firmware is over-writing the config file after the start-up script runs.

just for your peace of mind, the contents of configuration file is correct as I use the exact same on my desktop.

[drlava]

as far as I know, the only writeable portion of the filesystem would be the jffs forlder with jffs2 running (or an smb mounted folder). Everything else is loaded from the ROM at bootup. If you saved your script to that and called lled it/configured openVPN to run it via a nvram setting, that would work. V24 will have a writeable file system but that's a ways off.

[Blackraven]

sorry, the cipher failed pushed me in the wrong direction.
I tried to recreate your problem, seems that I was unable to write to the openvpn subdir, however I was able to write to /tmp directly, so if you would echo it there, it should work...

[JohnnyPrimus]

From openvpn.c (dd-wrt_v23 sp2 vpn):

#ifdef HAVE_OPENVPN
int
start_openvpn (void)
{
if (nvram_invmatch ("openvpn_enable", "1"))
return -1;
mkdir ("/tmp/openvpn", 0700);
FILE *fp = fopen ("/tmp/openvpn/openvpn.conf", "wb");
if (fp == NULL)
return -1;
fprintf (fp, "client\n");
fprintf (fp, "dev tun\n");
...
...
}


this from bcmnvram.h:
/*
* Inversely match an NVRAM variable.
* @param name name of variable to match
* @param match value to compare against value of variable
* @return TRUE if variable is defined and its value is not string
* equal to invmatch or FALSE otherwise
*/
...
nvram_invmatch(char *name, char *invmatch)




So if the openvpn_enable is set to anything at all besides "1", you'll overwrite your config....since thats the only place that openvpn.conf is written to, I'd assume that your openvpn_enable is not set to 1. Try:

nvram set openvpn_enable="1"
nvram commit
reboot


And check to see if it fixes things...