Skip to content
This repository has been archived by the owner on Jun 4, 2021. It is now read-only.

URGENT Failed installation at "Add the official OpenVPN APT key" #1794

Open
thiras opened this issue Jul 27, 2020 · 14 comments · May be fixed by #1796
Open

URGENT Failed installation at "Add the official OpenVPN APT key" #1794

thiras opened this issue Jul 27, 2020 · 14 comments · May be fixed by #1796

Comments

@thiras
Copy link
Contributor

thiras commented Jul 27, 2020 •
edited
Loading

Expected behavior:

Pass the Add the official OpenVPN APT key step

Actual Behavior:

Fails at the step

Steps to Reproduce:

  1. Create 1 core Ubuntu 16.04 machine on DigitalOcean
  2. apt update && apt upgrade -y && reboot
  3. ssh-keygen (the script fails when a key not found on the machine)
  4. Follow the official installation steps
  5. Start streisand and select 7. No customization on the configuration. No domain submitted.)
  6. The script fails at Add the official OpenVPN APT key step

I've also tried against a newly generated machine through the Existing machine option. The bug is still there. Probably applies all the provisioning options.

Here is the ANSIBLE_DEBUG=True log of the failure; https://www.pastebin.com/1ba9q0DE

Ansible Information

  • Ansible version: 2.8.4
  • Ansible system: Linux
  • Host OS: Ubuntu
  • Host OS version: 16.04
  • Python interpreter: /usr/bin/python
  • Python version: 2.7.12

Streisand Information

  • Streisand Git revision: af5eb7d
  • Streisand Git clone has untracked changes: no
  • Genesis role: localhost
  • Custom SSH key: False

Enabled Roles

  • Shadowsocks enabled: True
  • Wireguard enabled: True
  • OpenVPN enabled: True
  • stunnel enabled: True
  • Tor enabled: False
  • Openconnect enabled: True
  • TinyProxy enabled: True
  • SSH forward user enabled: True
  • Configured number of VPN clients: 10
@thiras thiras changed the title Failed "localhost" installation at "Add the official OpenVPN APT key" URGENT Failed installation at "Add the official OpenVPN APT key" Jul 27, 2020
@thiras
Copy link
Contributor Author

thiras commented Jul 27, 2020

It seems OpenVPN key and repository address has changed. Trying to test with the new repo. I'll PR the fix if it's valid ASAP.

@noelleleigh
Copy link

noelleleigh commented Jul 27, 2020 •
edited
Loading

Do we know what the difference is between the instructions on Access Server Software Packages:

apt update && apt -y install ca-certificates wget net-tools gnupg
wget -qO - https://as-repository.openvpn.net/as-repo-public.gpg | apt-key add -
echo "deb [arch=amd64] http://as-repository.openvpn.net/as/debian xenial main">/etc/apt/sources.list.d/openvpn-as-repo.list
apt update && apt -y install openvpn-as

and the instructions on OpenvpnSoftwareRepos?:

$ sudo -s
$ wget -O - https://swupdate.openvpn.net/repos/repo-public.gpg|apt-key add -
$ echo "deb http://build.openvpn.net/debian/openvpn/<version> <osrelease> main" > /etc/apt/sources.list.d/openvpn-aptrepo.list

Which key + repo URL is the one that Streisand needs?

See #866 for the last time this happened.

@thiras
Copy link
Contributor Author

thiras commented Jul 27, 2020

@noelleleigh That repository has 2.3.x for the xenial. That's a big problem since 2.3.x doesn't support fully TLS stuff. I've tried to inform the build repository admin about the expired key.

@noelleleigh
Copy link

@noelleleigh That repository has 2.3.x for the xenial. That's a big problem since 2.3.x doesn't support fully TLS stuff.

So do both repos contain the same packages, just with different versions?

@thiras
Copy link
Contributor Author

thiras commented Jul 27, 2020

I think so. But I don't know their differences exactly other than versions.

@thiras
Copy link
Contributor Author

thiras commented Jul 27, 2020 •
edited
Loading

I've noticed that as-repository OpenVPN package named as openvpn-as. But it seems the package uses a totally different configuration and service names etc.

No luck so far.

I've reported to the bug to thier Trac; https://community.openvpn.net/openvpn/ticket/1309

@thiras
Copy link
Contributor Author

thiras commented Jul 28, 2020 •
edited
Loading

#1796 is waiting to be merged. I've just changed the key and looks good now.

@thiras thiras linked a pull request Jul 28, 2020 that will close this issue
Open
@izzoa
Copy link

izzoa commented Aug 8, 2020

any update on this?

@dev7machine
Copy link

Facing the same issue .

@LDuncAndroid
Copy link

Just hit it too.

@7olstoy 7olstoy mentioned this issue Aug 11, 2020
Open
@Nedudi
Copy link

Nedudi commented Aug 12, 2020

same

@felegy
Copy link

felegy commented Aug 13, 2020 •
edited
Loading

Hi, see my workaround > #1798

My commit > 0bb74f8

@koroleves
Copy link

one more

@timopotam
Copy link

Hello everyone! I fixed this issue like this :
`curl -s https://swupdate.openvpn.net/repos/repo-public.gpg | apt-key add -

echo "deb http://build.openvpn.net/debian/openvpn/stable xenial main" > /etc/apt/sources.list.d/openvpn-aptrepo.list

apt update`

@xpat xpat mentioned this issue Nov 16, 2020
Open
DecaVPN-Team added a commit to decavpn/streisand that referenced this issue Jan 14, 2021
@DecaVPN-Team
Update openvpn signing keys 1/2
c039b97 
StreisandEffect#1794 (comment)
DecaVPN-Team added a commit to decavpn/streisand that referenced this issue Jan 14, 2021
@DecaVPN-Team
Fix openvpn signing keys 2/2
074f0e9 
StreisandEffect#1794 (comment)
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Fix #1794 Update OpenVPN repository key thiras/streisand
9 participants
@Nedudi @felegy @koroleves @LDuncAndroid @thiras @izzoa @noelleleigh @dev7machine @timopotam