Topic: Resolving Dependencies - Installation of OpenVPN - help required

[snuggles99]

Hello All,

I am trying to install OpenVPN on my SME 8 Server as per these instructions:

http://wiki.contribs.org/OpenVPN

The first bunch of instructions here are:

Code: [Select]

cd /root
mkdir openvpn
cd openvpn
wget http://apt.sw.be/redhat/el5/en/i386/dag/RPMS/lzo-2.06-1.el5.rf.i386.rpm
wget http://apt.sw.be/redhat/el5/en/i386/dag/RPMS/openvpn-2.2.2-1.el5.rf.i386.rpm
# (--Ddougan 20:53, 6 September 2012 (MDT))
wget http://apt.sw.be/redhat/el5/en/i386/dag/RPMS/pkcs11-helper-1.08-1.el5.rf.i386.rpm
rpm -Uvh *.rpm
The downloading of the required installation files via wget works fine, however upon calling the command:

Code: [Select]

rpm -Uvh *.rpm
I get the following error messages:

Code: [Select]

[root@smeserver openvpn]# rpm -Uvh *.rpm
Fehler: Fehlgeschlagende Abhängigkeiten:
        libcrypto.so.6 wird benötigt von openvpn-2.2.2-1.el5.rf.i386
        libpam.so.0 wird benötigt von openvpn-2.2.2-1.el5.rf.i386
        libpam.so.0(LIBPAM_1.0) wird benötigt von openvpn-2.2.2-1.el5.rf.i386
        libselinux.so.1 wird benötigt von openvpn-2.2.2-1.el5.rf.i386
        libssl.so.6 wird benötigt von openvpn-2.2.2-1.el5.rf.i386
        libcrypto.so.6 wird benötigt von pkcs11-helper-1.08-1.el5.rf.i386
        libgnutls.so.13 wird benötigt von pkcs11-helper-1.08-1.el5.rf.i386
        libgnutls.so.13(GNUTLS_1_3) wird benötigt von pkcs11-helper-1.08-1.el5.rf.i386
        libnspr4.so wird benötigt von pkcs11-helper-1.08-1.el5.rf.i386
        libnss3.so wird benötigt von pkcs11-helper-1.08-1.el5.rf.i386
        libnss3.so(NSS_3.2) wird benötigt von pkcs11-helper-1.08-1.el5.rf.i386
        libnss3.so(NSS_3.3) wird benötigt von pkcs11-helper-1.08-1.el5.rf.i386
        libnss3.so(NSS_3.7) wird benötigt von pkcs11-helper-1.08-1.el5.rf.i386
        libnss3.so(NSS_3.9.2) wird benötigt von pkcs11-helper-1.08-1.el5.rf.i386
        libnssutil3.so wird benötigt von pkcs11-helper-1.08-1.el5.rf.i386
        libplc4.so wird benötigt von pkcs11-helper-1.08-1.el5.rf.i386
        libplds4.so wird benötigt von pkcs11-helper-1.08-1.el5.rf.i386
        libsmime3.so wird benötigt von pkcs11-helper-1.08-1.el5.rf.i386
        libsmime3.so(NSS_3.4) wird benötigt von pkcs11-helper-1.08-1.el5.rf.i386
        libssl3.so wird benötigt von pkcs11-helper-1.08-1.el5.rf.i386
        libz.so.1 wird benötigt von pkcs11-helper-1.08-1.el5.rf.i386
Initially it was even more errors, but by trial and error I was able to locate some of the missing packages.

However my question is: is there any structured way how to resolve these dependencies?

Thanks for any help!
Stefan

[Daniel B.]

Code: [Select]

yum --enablerepo=smecontribs install openvpn

This command should install the latest OpenVPN rpm and resolve all the dependencies

[snuggles99]

Hello Daniel,

wow, that was quick - thank you very much!

One more question, please:

Already the next steep of the installation description under:

http://wiki.contribs.org/OpenVPN

Which is:

Now its time to create the keys. The openvpn configs live in /etc/openvpn. First we need to edit the file with default values to match our installation. Open the file "vars" and Edit the default values to reflect your setup at the bottom of the file (KEY_COUNTRY, KEY_PROVINCE, KEY_CITY, KEY_ORG, KEY_EMAIL). Default we use 1024 bit Diffie Hellman but this can be changed to 2048 or even 4096 bit keys (depending of your paranoia level..)

Is no longer valid, as there is no file "vars" in /etc/openvpn (actually directory is empty).

So I assume the whole installation instrcutions are outdated, due to changes in OpenVPN functionality.

==> You wouldn't happen to know, also how to go on and get OpenVPN configured, up and running?

[Daniel B.]

Not sure for this how-to. But I maintain two other OpenVPN contribs (see http://wiki.contribs.org/OpenVPN_Bridge and http://wiki.contribs.org/OpenVPN_SiteToSite) which are working with the latest versions.

Regards, Daniel

[snuggles99]

Oh!

If I understand correctly 
http://wiki.contribs.org/OpenVPN_Bridge
also can be used to connect remote Windows Clients to the local network and even get an IP address from there, correct?

Wouldn't this leave the "normal" OpenVPN installation obsolete, so that I just can proceed with your OpenVPN_Bridge solution?

[Daniel B.]

Yes, the OpenVPN Bridge contrib lets you connect remote computers on your local LAN (clients will get an IP from your local LAN). The SiteToSite is more targeted for permanent tunnels between several SME servers (or SME server and anything else in fact, I used it several time to connect a remote PfSense to my SME for example).

Of course, as I'm the author of those two contribs, I'd recommand you to use it instead of the original OpenVPN one

Regards, Daniel

[snuggles99]

Thank you for the clear answer!

I know, that it is not my concern, but maybe discarding the description under http://wiki.contribs.org/OpenVPN, in order to save dummies like me from wasting time, trying to use something that is not working and probably obsolete, would be a good idea?

I will now happily proceed with your OpenVPN_Bridge instructions.

regards
Stefan