380.66-Beta5 with PIA

[jjbine]

I just can't get the VPN to start. (The server starts fine)

So, it was suggested to update to 380.66 Beta5 and just upload PIA's OVPN file and it will take care of everything.

I pasted the
ca.rsa.2048.crt to the Certificate authority section and crl.rsa.2048.pem to the Certificate Revocation List (Optional) section. Then hit SAVE. Back to the
Client setup page and uploaded the PIA OVPN file. Got this error.
Warning (17) while importing file - you will need to manually provide the CA, CRL content, on the keys/certificates page.

I read somewhere to take out these 2 line in the OVPN file....
crl-verify crl.rsa.2048.pem
ca ca.rsa.2048.crt, so I did and the file uploaded fine. Started the Client1 and now getting this error.
Jul 31 20:33:08 rc_service: httpd 474:notify_rc start_vpnclient1
Jul 31 20:33:24 openvpn[1346]: Options error: You must define CA file (--ca) or CA path (--capath)
Jul 31 20:33:24 openvpn[1346]: Use --help for more information.

I'm stuck and confused. Please help.
Thanks
Jim

 

[Xentrk]

I just can't get the VPN to start. (The server starts fine)

So, it was suggested to update to 380.66 Beta5 and just upload PIA's OVPN file and it will take care of everything.

I pasted the
ca.rsa.2048.crt to the Certificate authority section and crl.rsa.2048.pem to the Certificate Revocation List (Optional) section. Then hit SAVE. Back to the
Client setup page and uploaded the PIA OVPN file. Got this error.
Warning (17) while importing file - you will need to manually provide the CA, CRL content, on the keys/certificates page.

I read somewhere to take out these 2 line in the OVPN file....
crl-verify crl.rsa.2048.pem
ca ca.rsa.2048.crt, so I did and the file uploaded fine. Started the Client1 and now getting this error.
Jul 31 20:33:08 rc_service: httpd 474:notify_rc start_vpnclient1
Jul 31 20:33:24 openvpn[1346]: Options error: You must define CA file (--ca) or CA path (--capath)
Jul 31 20:33:24 openvpn[1346]: Use --help for more information.

I'm stuck and confused. Please help.
Thanks
Jim

Did you click on Keys & Certificates and paste the CA and the CRL content (the files are in the PIA zip)?
Refer to this post for further instructions:
https://www.snbforums.com/threads/h...her-vpn-providers-380-65_4.30851/#post-242926

 

[jjbine]

Did you click on Keys & Certificates and paste the CA and the CRL content (the files are in the PIA zip)?
Refer to this post for further instructions:
https://www.snbforums.com/threads/h...her-vpn-providers-380-65_4.30851/#post-242926

Yes I did. After pasting I hit SAVE then back to the client screen.

 

[RMerlin]

You have to paste the CA and CRL AFTER uploading the ovpn, just like the warning message told you.

 

[jjbine]

You have to paste the CA and CRL AFTER uploading the ovpn, just like the warning message told you.

THANK you are trying to help me.

This is the error message I am now getting.
Jul 31 22:09:54 rc_service: httpd 474:notify_rc start_vpnclient1
Jul 31 22:10:11 openvpn[2259]: OpenVPN 2.4.1 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on May 8 2017
Jul 31 22:10:11 openvpn[2259]: library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.08
Jul 31 22:10:11 openvpn[2260]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Jul 31 22:10:11 openvpn[2260]: RESOLVE: Cannot resolve host address: us-midwest.privateinternetaccess.com:1198 (Name or service not known)
Jul 31 22:10:11 openvpn[2260]: RESOLVE: Cannot resolve host address: us-midwest.privateinternetaccess.com:1198 (Name or service not known)
Jul 31 22:10:11 openvpn[2260]: Could not determine IPv4/IPv6 protocol
Jul 31 22:10:11 openvpn[2260]: SIGUSR1[soft,init_instance] received, process restarting

The processing I am doing is..

1). Upload the PIA OVPN file WITHOUT these 2 lines
crl-verify crl.rsa.2048.pem
ca ca.rsa.2048.crt

2) copy and paste ..2048.pem to Certificate Revocation List (optional)
3) copy and paste ..2048.crt to Certificate Authority.
4) hit SAVE
5) enter user/password
6) Turn ON the client

Thanks again for your help.
Jim

 

[Xentrk]

ASUS Merlin/PIA setup video, this may be another resource that may help you in addition to Yorgi's guide. Not sure what version of FW they are using though. But it is dated Oct, 2016

And you are doing everything listed here?
https://helpdesk.privateinternetacc...ing-up-an-Asus-Router-running-Merlin-Firmware

Also, what text editor are you using to copy/paste the ca cert? Try Notepad++

 

[Xentrk]

Another thought, what are you using for your WAN DNS Servers? Are you using the default DNS Servers of your ISP? On the WAN gui page, check no radio button on Connnect to DNS Servers Automatically. Enter OpenDNS DNS Servers (google search) or googles 8.8.8.8 and 8.8.4.4. Not sure if PIA has their own dns servers.

 

[yorgi]

I just can't get the VPN to start. (The server starts fine)

So, it was suggested to update to 380.66 Beta5 and just upload PIA's OVPN file and it will take care of everything.

I pasted the
ca.rsa.2048.crt to the Certificate authority section and crl.rsa.2048.pem to the Certificate Revocation List (Optional) section. Then hit SAVE. Back to the
Client setup page and uploaded the PIA OVPN file. Got this error.
Warning (17) while importing file - you will need to manually provide the CA, CRL content, on the keys/certificates page.

I read somewhere to take out these 2 line in the OVPN file....
crl-verify crl.rsa.2048.pem
ca ca.rsa.2048.crt, so I did and the file uploaded fine. Started the Client1 and now getting this error.
Jul 31 20:33:08 rc_service: httpd 474:notify_rc start_vpnclient1
Jul 31 20:33:24 openvpn[1346]: Options error: You must define CA file (--ca) or CA path (--capath)
Jul 31 20:33:24 openvpn[1346]: Use --help for more information.

I'm stuck and confused. Please help.
Thanks
Jim

follow this updated guide for PIA
https://www.snbforums.com/threads/h...and-other-vpn-providers-380-66_4-06-11.30851/