[uggitt]

I checked the openvpn status and still info at all.

Also where do I check for 'Connected Success' as not sure where to look unless its in the openvpn status details

[spuriousoffspring]

Under the 'Status' Tab - 'OpenVPN' Sub Tab.

What do you have there? Has your external IP Address changed?

[uggitt]

Hi, no info at all in the staus>openvpn. This is what it shows below but ny private IP address has changed.:

State
Client:
Local Address:
Remote Address:

Status
VPN Client Stats

Log
Clientlog:

[spuriousoffspring]

I'm thinking that it's possible the CA Certificate might have been somehow altered when copied over into the 'CA Cert' box.

Delete everything in 'CA Cert' and recopy the CA Certificate over again. Copy it over directly from ipVanish's instructions. Don't save it on your computer first to avoid it being changed by something like 'spell check'.

http://www.ipvanish.com/software/configs/guideCRT.txt

Also, remove everything from the 'Additional Config' box except for remote-cert-tls server

When you're done the only boxes underneath 'ns Cert Type Verification' (not selected) that should have anything in them are:
'Additional Config' remote-cert-tls server
'CA Cert' All text from above link

Click on Apply Settings

Give it about 10 seconds & then check the 'Status' Tab - 'VPN' Sub Tab.

Hopefully that does it. Let me know as soon as you can how it turns out!

[uggitt]

Hi, Thanks again for your help.

I adjusted the settings but still no details in the status>openvpn page.

I have noticed in the syslog the date is incoreect. Here is a part of it below:

an 1 00:00:29 DD-WRT syslog.info syslogd started: BusyBox v1.26.2
Jan 1 00:00:29 DD-WRT user.info : hwmon successfully started
Jan 1 00:00:29 DD-WRT user.info : wland : WLAN daemon successfully started
Jan 1 00:00:29 DD-WRT user.info : openvpn : OpenVPN daemon (Client) starting/restarting...
Jan 1 00:00:29 DD-WRT user.info : telnetd : telnet daemon successfully started
Jan 1 00:00:29 DD-WRT user.info : dropbear : ssh daemon successfully started
Jan 1 00:00:29 DD-WRT authpriv.info dropbear[1245]: Running in background
Jan 1 00:00:30 DD-WRT user.info : cron : cron daemon successfully started
Jan 1 00:00:30 DD-WRT cron.info cron[1252]: (CRON) STARTUP (fork ok)
Jan 1 00:00:30 DD-WRT daemon.warn openvpn[1225]: WARNING: file '/tmp/openvpncl/credentials' is group or others accessible
Jan 1 00:00:30 DD-WRT daemon.notice openvpn[1225]: OpenVPN 2.4.1 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on May 2 2017
Jan 1 00:00:30 DD-WRT daemon.notice openvpn[1225]: library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09
Jan 1 00:00:30 DD-WRT daemon.notice openvpn[1292]: MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:16
Jan 1 00:00:30 DD-WRT daemon.warn openvpn[1292]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Jan 1 00:00:30 DD-WRT user.info : dnsmasq : dnsmasq daemon successfully started
Jan 1 00:00:30 DD-WRT daemon.err openvpn[1292]: Cannot load CA certificate file /tmp/openvpncl/ca.crt (no entries were read)
Jan 1 00:00:30 DD-WRT daemon.notice openvpn[1292]: Exiting due to fatal error

[spuriousoffspring]

That's normal at first start-up.

Does it begin to display the correct date & time a bit later in the Syslog?

The time is displayed in UTC (Universal Coordinated Time).

https://www.windowscentral.com/how-set-multiple-time-zone-clocks-windows-10

[uggitt]

yes, if you go to the end of the syslog the date is correct

still getting the following error:

Aug 27 12:52:44 DD-WRT daemon.warn openvpn[3827]: WARNING: file '/tmp/openvpncl/credentials' is group or others accessible
Aug 27 12:52:44 DD-WRT daemon.notice openvpn[3827]: OpenVPN 2.4.1 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on May 2 2017
Aug 27 12:52:44 DD-WRT daemon.notice openvpn[3827]: library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09
Aug 27 12:52:44 DD-WRT daemon.notice openvpn[3829]: MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:16
Aug 27 12:52:44 DD-WRT daemon.warn openvpn[3829]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Aug 27 12:52:44 DD-WRT daemon.err openvpn[3829]: Cannot load CA certificate file /tmp/openvpncl/ca.crt (no entries were read)
Aug 27 12:52:44 DD-WRT daemon.notice openvpn[3829]: Exiting due to fatal error
Aug 27 12:52:44 DD-WRT user.info : udpxy : UDP-to-HTTP multicast traffic relay daemon stopped
Aug 27 12:53:58 DD-WRT daemon.info hostapd: ath1: STA 80:7a:bf:3e:3a:9f IEEE 802.11: authenticated
Aug 27 12:53:58 DD-WRT daemon.info hostapd: ath1: STA 80:7a:bf:3e:3a:9f IEEE 802.11: associated (aid 2)
Aug 27 12:53:58 DD-WRT daemon.info hostapd: ath1: STA 80:7a:bf:3e:3a:9f RADIUS: starting accounting session 49AF6A58F64D84C1
Aug 27 12:53:58 DD-WRT daemon.info hostapd: ath1: STA 80:7a:bf:3e:3a:9f WPA: pairwise key handshake completed (RSN)
Aug 27 12:55:13 DD-WRT daemon.info hostapd: ath1: STA 80:7a:bf:3e:3a:9f IEEE 802.11: disassociated
Aug 27 12:55:14 DD-WRT daemon.info hostapd: ath1: STA 80:7a:bf:3e:3a:9f IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE)
Aug 27 12:55:55 DD-WRT daemon.info hostapd: ath0: STA 88:71:e5:b2:ba:78 IEEE 802.11: authenticated
Aug 27 12:55:55 DD-WRT daemon.info hostapd: ath0: STA 88:71:e5:b2:ba:78 IEEE 802.11: associated (aid 1)
Aug 27 12:55:55 DD-WRT daemon.info hostapd: ath0: STA 88:71:e5:b2:ba:78 RADIUS: starting accounting session 8147A569920E36A3
Aug 27 12:55:55 DD-WRT daemon.info hostapd: ath0: STA 88:71:e5:b2:ba:78 WPA: pairwise key handshake completed (RSN)
Aug 27 12:56:17 DD-WRT daemon.info hostapd: ath1: STA 80:7a:bf:3e:3a:9f IEEE 802.11: authenticated
Aug 27 12:56:17 DD-WRT daemon.info hostapd: ath1: STA 80:7a:bf:3e:3a:9f IEEE 802.11: associated (aid 2)
Aug 27 12:56:17 DD-WRT daemon.info hostapd: ath1: STA 80:7a:bf:3e:3a:9f RADIUS: starting accounting session D20DC9C9BE103211
Aug 27 12:56:17 DD-WRT daemon.info hostapd: ath1: STA 80:7a:bf:3e:3a:9f WPA: pairwise key handshake completed (RSN)
Aug 27 12:57:39 DD-WRT daemon.info hostapd: ath1: STA c8:f6:50:63:8e:5f IEEE 802.11: authenticated

[spuriousoffspring]

Everything looks fine to me until you get:

Cannot load CA certificate file /tmp/openvpncl/ca.crt (no entries were read)

I'm 99% sure whatever is causing that error is also what's responsible for the Status Log being blank.

Is it still working? if you switch to another one of ipVanish's servers does your IP also change?

[uggitt]

i have tried 2 different servers in the same country and I still get the same WAN ip address. Also checked whats my ip and comes back the same as before.

[uggitt]

I just tried a totally different country and changed the ntp server to match and now the wan ip has changed.

[spuriousoffspring]

I use this to check mine:

https://www.whatismyip.com

[uggitt]

Thanks again for all your help.

I have opened a help ticket with IPvanish as it is still not working correctly.

[spuriousoffspring]

So it turns out that the CA Certificate was posted incorrectly on the ipVanish updated instructions.

Here is the correct CA Cert:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

[uggitt]

Top Man.

Helped so much and got to the bottom of the problem.

Thank you once again and thumbs down to Ipvanish for putting up the wrong cert.

[spuriousoffspring]