$ sudo ./openvpn /etc/openvpn/config/server.conf
Sat Nov 17 22:12:58 2007 OpenVPN 2.0.9 i686-pc-linux [SSL] [LZO] [EPOLL] built on Nov 17 2007
Sat Nov 17 22:12:58 2007 Cannot open dh1024.pem for DH parameters:
error:02001002:system library:fopen:No such file or directory: 
error:2006D080:BIO routines:BIO_new_file:no such file
Sat Nov 17 22:12:58 2007 Exiting

$ cat config/dh1024.pem
-----BEGIN DH PARAMETERS-----
MIGHAoGBALhJTdaFGQUZQwsaSP/sesg6M/MhNNuPUj78hB8Gjt+R2bdIYp3UWzok
zw6TAp7zQM7HcvpuPXV7w8f7BwkVEJ0nv7NbEwdmrwiNgyANKRCMV4G+oSsqHSFi
uyRkw7FZd8tVlXeBOo5djLNbLYd3VBFE9PPJim7nmGGGm/VmGUrjAgEC
-----END DH PARAMETERS-----
 

$ ls -la
total 32
drwxrwxr-x 2 quanta quanta 4096 Nov 17 22:12 .
drwxrwxr-x 17 quanta quanta 4096 Nov 17 20:50 ..
-rw-r--r-- 1 root root 1216 Nov 17 21:20 ca.crt
-rw-r--r-- 1 root root 245 Nov 17 22:12 dh1024.pem
-rw-r--r-- 1 root root 9970 Nov 17 21:20 server.conf
-rw-r--r-- 1 root root 0 Nov 17 21:20 server.crt
-rw------- 1 root root 887 Nov 17 21:20 server.key
 

Problem solved. I changed the route to the dh1024.pem file back to the original route from the sample config file, and saved it. Tried to start OpenVPN. No good. Then I changed it back to the location where the file resides on my machine, saved it, and tried to start OpenVPN again. It worked. Don't ask me to explain it. It's working now. I guess that's all I can ask for
 

Thảy lên nội dung của server.conf xem? 

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
# Diffie hellman parameters.
dh dh1024.pem

server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
 

Config xem ok. Chủ quyền thư mục và hồ sơ ok.

Tại sao em chạy dòng này? Tại sao có sudo trong đó?

$ sudo ./openvpn /etc/openvpn/config/server.conf

 

$ ./openvpn /etc/openvpn/config/server.conf
Sun Nov 18 16:10:44 2007 OpenVPN 2.0.9 i686-pc-linux [SSL] [LZO] [EPOLL] built on Nov 17 2007
Sun Nov 18 16:10:44 2007 Note: cannot open openvpn-status.log for WRITE
Sun Nov 18 16:10:44 2007 Note: cannot open ipp.txt for READ/WRITE
Sun Nov 18 16:10:44 2007 Cannot open dh1024.pem for DH parameters:
error:02001002:system library:fopen:No such file or directory: error:2006D080:BIO routines:BIO_new_file:no such file
Sun Nov 18 16:10:44 2007 Exiting
 

$ sudo ./openvpn /etc/openvpn/config/server.conf
Sun Nov 18 16:11:00 2007 OpenVPN 2.0.9 i686-pc-linux [SSL] [LZO] [EPOLL] built on Nov 17 2007
Sun Nov 18 16:11:00 2007 Cannot open dh1024.pem for DH parameters:
error:02001002:system library:fopen:No such file or directory: error:2006D080:BIO routines:BIO_new_file:no such file
Sun Nov 18 16:11:00 2007 Exiting
 

[root@localhost sbin]# ./openvpn /etc/openvpn/config/server.conf
Sun Nov 18 16:57:30 2007 OpenVPN 2.0.9 i686-pc-linux [SSL] [LZO] [EPOLL] built on Nov 17 2007
Sun Nov 18 16:57:30 2007 Cannot open dh1024.pem for DH parameters:
error:02001002:system library:fopen:No such file or directory: error:2006D080:BIO routines:BIO_new_file:no such file
Sun Nov 18 16:57:30 2007 Exiting 

...
ca ca.crt
cert server.crt
key server.key # This file should be kept secret

# Diffie hellman parameters.
# Generate your own with:
# openssl dhparam -out dh1024.pem 1024
# Substitute 2048 for 1024 if you are using
# 2048 bit keys.
dh dh1024.pem
...
 

...
ca /etc/openvpn/config/ca.crt
cert /etc/openvpn/config/server.crt
key /etc/openvpn/config/server.key # This file should be kept secret

# Diffie hellman parameters.
# Generate your own with:
# openssl dhparam -out dh1024.pem 1024
# Substitute 2048 for 1024 if you are using
# 2048 bit keys.
dh /etc/openvpn/config/dh1024.pem
...
 

# cd /etc/openvpn/easy-rsa
# ./build-ca
# cp keys/ca.crt /etc/openvpn 

#./build-key-server server
# cp keys/server.crt /etc/openvpn
# cp keys/server.key /etc/openvpn 

# ./build-dh
# cp keys/dh1024.pem /etc/openvpn