Posts by tuto

tuto · VPN Manager for OpenVPN tuto June 4, 2017 at 9:43 AM

omg.... i'm dumb! didn't realize openVPN has different credentials. sorted. it all works now. thanks!

tuto · VPN Manager for OpenVPN tuto June 4, 2017 at 2:35 AM

Hi,

First of all thanks Zomboided for your great effort. Very useful tool and worked well on my side for the longest time up to openELEC 6.95.3 and VPN Man 2.4.3.

Now due to the 2038 bug (or WIndscribe issue, which affected ExpressVPN as well) I couldn't get it working on newer OpenELEC and neither on LibreELEC, as i got that error

Code

VERIFY ERROR: depth=1, error=format error in certificate's notAfter field:

I tried infinity85's advise (thanks!) of giving the latest milhouse build of libreelec a try (LibreELEC-RPi2.arm-9.0-Milhouse-20170602210407-#0602), since that rolled back to openSSL, and it does seem to solve the 2038 issue! This is with VPN Man 4.0.7.

But i do get an authentication error instead though:

Code

00:43:08.264 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 WARNING: file '/storage/.kodi/userdata/addon_data/service.vpn.manager/ExpressVPN/user.key' is group or others accessible
00:43:08.264 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 WARNING: file '/storage/.kodi/addons/service.vpn.manager/ExpressVPN/ta.key' is group or others accessible
00:43:08.264 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 WARNING: file '/storage/.kodi/addons/service.vpn.manager/ExpressVPN/pass.txt' is group or others accessible
00:43:08.264 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 OpenVPN 2.4.1 armv7ve-libreelec-linux-gnueabi [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [AEAD] built on May 24 2017
00:43:08.264 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 library versions: OpenSSL 1.0.2k  26 Jan 2017, LZO 2.10
00:43:08.264 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
00:43:08.265 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
00:43:08.265 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
00:43:08.265 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]45.56.158.12:1195
00:43:08.265 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 Socket Buffers: R=[163840->327680] S=[163840->327680]
00:43:08.265 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 UDP link local: (not bound)
00:43:08.265 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 UDP link remote: [AF_INET]45.56.158.12:1195
00:43:08.265 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 TLS: Initial packet from [AF_INET]45.56.158.12:1195, sid=82320822 1cefc425
00:43:08.265 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
00:43:08.265 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 VERIFY OK: depth=1, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=ExpressVPN CA, emailAddress=support@expressvpn.com
00:43:08.265 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 VERIFY OK: nsCertType=SERVER
00:43:08.265 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 VERIFY X509NAME OK: C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=Server-783-1a, emailAddress=support@expressvpn.com
00:43:08.265 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 VERIFY OK: depth=0, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=Server-783-1a, emailAddress=support@expressvpn.com
00:43:08.265 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
00:43:08.266 T:1820095392  NOTICE: Sun Jun  4 00:42:39 2017 [Server-783-1a] Peer Connection Initiated with [AF_INET]45.56.158.12:1195
00:43:08.266 T:1820095392  NOTICE: Sun Jun  4 00:42:40 2017 SENT CONTROL [Server-783-1a]: 'PUSH_REQUEST' (status=1)
00:43:08.266 T:1820095392  NOTICE: Sun Jun  4 00:42:40 2017 AUTH: Received control message: AUTH_FAILED
00:43:08.266 T:1820095392  NOTICE: Sun Jun  4 00:42:40 2017 SIGTERM[soft,auth-failure] received, process exiting

Display More

Now, I'm not real good with interpreting code, but i did notice, that the pass.txt file that gets created with ExpressVPN does look like this, if username is xxxxxxxxxx and password is yyyyyyyyyy:

Code

xxxxxxxxxxyyyyyyyyyy

while if i remember correctly it used to look like in early versions

Code

xxxxxxxxxx
yyyyyyyyyy

with a line break.

i tried to edit it but it seems to get overwritten whenever you set up a connection.

could this be the issue?