{"action":"opened","issue":{"url":"https://api.github.com/repos/joyent/pkgsrc/issues/386","repository_url":"https://api.github.com/repos/joyent/pkgsrc","labels_url":"https://api.github.com/repos/joyent/pkgsrc/issues/386/labels{/name}","comments_url":"https://api.github.com/repos/joyent/pkgsrc/issues/386/comments","events_url":"https://api.github.com/repos/joyent/pkgsrc/issues/386/events","html_url":"https://github.com/joyent/pkgsrc/issues/386","id":164437533,"number":386,"title":"OpenVPN 2.3.6 cannot grab smartos gateway information, OpenVPN devs think the issue is fixed in 2.3.11","user":{"login":"baetheus","id":751714,"avatar_url":"https://avatars.githubusercontent.com/u/751714?v=3","gravatar_id":"","url":"https://api.github.com/users/baetheus","html_url":"https://github.com/baetheus","followers_url":"https://api.github.com/users/baetheus/followers","following_url":"https://api.github.com/users/baetheus/following{/other_user}","gists_url":"https://api.github.com/users/baetheus/gists{/gist_id}","starred_url":"https://api.github.com/users/baetheus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/baetheus/subscriptions","organizations_url":"https://api.github.com/users/baetheus/orgs","repos_url":"https://api.github.com/users/baetheus/repos","events_url":"https://api.github.com/users/baetheus/events{/privacy}","received_events_url":"https://api.github.com/users/baetheus/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-07-08T00:40:38Z","updated_at":"2016-07-08T00:40:38Z","closed_at":null,"body":"I submitted an issue with openvpn about openvpn 2.3.6 not being able to find the current default gateway  on smartos. Following is the original ticket that should be available here: https://community.openvpn.net/openvpn/ticket/696\r\n\r\n    GuestOS: SmartOS minimal-64 15.2.0 and SmartOS minimal-64 16.1.0\r\n    HostOS: SmartOS Live Image v0.147+ build: 20160527T033529Z\r\n\r\n    Openvpn build:\r\n        [root@transmission ~]# openvpn --version\r\n        OpenVPN 2.3.6 x86_64-sun-solaris2.11 [SSL (OpenSSL)] [LZO] [IPv6] built on Aug 30 2015\r\n        library versions: OpenSSL 1.0.2d 9 Jul 2015, LZO 2.09\r\n        Originally developed by James Yonan\r\n        Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <sales@…>\r\n        Compile time defines: enable_crypto=yes enable_crypto_ofb_cfb=yes enable_debug=no enable_def_auth=yes enable_dependency_tracking=no enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=needless enable_fragment=yes enable_http_proxy=yes enable_iproute2=no enable_libtool_lock=yes enable_lzo=yes enable_lzo_stub=no enable_management=yes enable_multi=yes enable_multihome=yes enable_pam_dlopen=no enable_password_save=yes enable_pedantic=no enable_pf=yes enable_pkcs11=no enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_small=no enable_socks=yes enable_ssl=yes enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=no enable_win32_dll=yes enable_x509_alt_username=no with_crypto_library=openssl with_gnu_ld=no with_mem_check=no with_plugindir='$(libdir)/openvpn/plugins' with_sysroot=no\r\n\r\n    Routing table: ​https://gist.github.com/anonymous/4259fd6dbf2b492b8a5805c1d3ba4f41\r\n    Openvpn config: ​https://gist.github.com/anonymous/543c6fc8b3aff6c4a98603058ede6ecd\r\n    Logs: ​https://gist.github.com/anonymous/00c3a70f3850e63c80371adadc50d9bb\r\n    The vpn provider is, as can be seen in the config and logs, Private Internet Access.\r\n\r\n    Steps to reproduce on a fresh install:\r\n    Install openvpn: # pkgin in openvpn\r\n    Copy config, certs, and auth to /opt/local/etc/openvpn/\r\n    Enable openvpn service: # svcadm enable -r openvpn\r\n    Reboot\r\n    Optional: access logs with: # tail -F $(svcs -L openvpn)\r\n\r\n    Temporary solution:\r\n    Manually add routes\r\n    route add default <tun1 internal address> 128.0.0.0\r\n    route add <vpn public address> <internal gateway> 255.255.255.255\r\n    route add 128.0.0.0 <tun1 internal address> 128.0.0.0\r\n    Check that traffic is forwarding properly\r\n        [root@test ~]# curl portquiz.net:666\r\n        Port 666 test successful!\r\n        Your IP: <vpn public address>\r\n    \r\nThe actual issue is that openvpn cannot detect the current default gateway, and thus fails before setting up all the routes for vpn tunneling. \r\n\r\nThe proffered advice was to run openvpn 2.3.11, as there is a commit that suggests the issue has already been resolved. In building openvpn 2.3.11 I ran into some issues with tap headers not being found, which is not surprising to me. I'm hoping I can either get some guidance on properly building openvpn 2.3.11 against smartos minimal-64 16.1.0 or perhaps a package upgrade in pkgsrc.\r\n\r\nThanks!"}}
{"actor":{"display_login":"baetheus"}}