Cyberghost VPN

Troubleshooting
21

so i’ve removed that option still fails but different reason now I think.

root@DietPi:~# journalctl -xeu dietpi-vpn.service
Dec 23 19:27:19 DietPi systemd[1]: Starting dietpi-vpn.service - VPN Client (DietPi)...
░░ Subject: A start job for unit dietpi-vpn.service has begun execution
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A start job for unit dietpi-vpn.service has begun execution.
░░
░░ The job identifier is 88.
Dec 23 19:27:20 DietPi openvpn[580]: Options error: Unrecognized option or missing or extra parameter(s) in /etc/openvpn/client.ovpn:14: ncp-disable (2.6.3)
Dec 23 19:27:20 DietPi openvpn[580]: Use --help for more information.
Dec 23 19:27:20 DietPi systemd[1]: dietpi-vpn.service: Main process exited, code=exited, status=1/FAILURE
░░ Subject: Unit process exited
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ An ExecStart= process belonging to unit dietpi-vpn.service has exited.
░░
░░ The process' exit code is 'exited' and its exit status is 1.
Dec 23 19:27:20 DietPi systemd[1]: dietpi-vpn.service: Failed with result 'exit-code'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ The unit dietpi-vpn.service has entered the 'failed' state with result 'exit-code'.
Dec 23 19:27:20 DietPi systemd[1]: Failed to start dietpi-vpn.service - VPN Client (DietPi).
░░ Subject: A start job for unit dietpi-vpn.service has failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A start job for unit dietpi-vpn.service has finished with a failure.
░░
░░ The job identifier is 88 and the job result is failed.
Dec 23 19:28:05 DietPi systemd[1]: Starting dietpi-vpn.service - VPN Client (DietPi)...
░░ Subject: A start job for unit dietpi-vpn.service has begun execution
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A start job for unit dietpi-vpn.service has begun execution.
░░
░░ The job identifier is 401.
Dec 23 19:28:05 DietPi openvpn[1860]: Options error: Unrecognized option or missing or extra parameter(s) in /etc/openvpn/client.ovpn:14: ncp-disable (2.6.3)
Dec 23 19:28:05 DietPi openvpn[1860]: Use --help for more information.
Dec 23 19:28:05 DietPi systemd[1]: dietpi-vpn.service: Main process exited, code=exited, status=1/FAILURE
░░ Subject: Unit process exited
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ An ExecStart= process belonging to unit dietpi-vpn.service has exited.
░░
░░ The process' exit code is 'exited' and its exit status is 1.
Dec 23 19:28:05 DietPi systemd[1]: dietpi-vpn.service: Failed with result 'exit-code'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ The unit dietpi-vpn.service has entered the 'failed' state with result 'exit-code'.
Dec 23 19:28:05 DietPi systemd[1]: Failed to start dietpi-vpn.service - VPN Client (DietPi).
░░ Subject: A start job for unit dietpi-vpn.service has failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A start job for unit dietpi-vpn.service has finished with a failure.
░░
░░ The job identifier is 401 and the job result is failed.
Dec 23 19:28:52 DietPi systemd[1]: Starting dietpi-vpn.service - VPN Client (DietPi)...
░░ Subject: A start job for unit dietpi-vpn.service has begun execution
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A start job for unit dietpi-vpn.service has begun execution.
░░
░░ The job identifier is 481.
Dec 23 19:28:52 DietPi openvpn[2360]: Options error: Unrecognized option or missing or extra parameter(s) in /etc/openvpn/client.ovpn:14: ncp-disable (2.6.3)
Dec 23 19:28:52 DietPi openvpn[2360]: Use --help for more information.
Dec 23 19:28:52 DietPi systemd[1]: dietpi-vpn.service: Main process exited, code=exited, status=1/FAILURE
░░ Subject: Unit process exited
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ An ExecStart= process belonging to unit dietpi-vpn.service has exited.
░░
░░ The process' exit code is 'exited' and its exit status is 1.
Dec 23 19:28:52 DietPi systemd[1]: dietpi-vpn.service: Failed with result 'exit-code'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ The unit dietpi-vpn.service has entered the 'failed' state with result 'exit-code'.
Dec 23 19:28:52 DietPi systemd[1]: Failed to start dietpi-vpn.service - VPN Client (DietPi).
░░ Subject: A start job for unit dietpi-vpn.service has failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A start job for unit dietpi-vpn.service has finished with a failure.
░░
░░ The job identifier is 481 and the job result is failed.
Dec 23 20:13:51 DietPi systemd[1]: Starting dietpi-vpn.service - VPN Client (DietPi)...
░░ Subject: A start job for unit dietpi-vpn.service has begun execution
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A start job for unit dietpi-vpn.service has begun execution.
░░
░░ The job identifier is 565.
Dec 23 20:13:51 DietPi openvpn[15616]: Options error: Unrecognized option or missing or extra parameter(s) in /etc/openvpn/client.ovpn:14: ncp-disable (2.6.3)
Dec 23 20:13:51 DietPi openvpn[15616]: Use --help for more information.
Dec 23 20:13:51 DietPi systemd[1]: dietpi-vpn.service: Main process exited, code=exited, status=1/FAILURE
░░ Subject: Unit process exited
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ An ExecStart= process belonging to unit dietpi-vpn.service has exited.
░░
░░ The process' exit code is 'exited' and its exit status is 1.
Dec 23 20:13:51 DietPi systemd[1]: dietpi-vpn.service: Failed with result 'exit-code'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ The unit dietpi-vpn.service has entered the 'failed' state with result 'exit-code'.
Dec 23 20:13:51 DietPi systemd[1]: Failed to start dietpi-vpn.service - VPN Client (DietPi).
░░ Subject: A start job for unit dietpi-vpn.service has failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A start job for unit dietpi-vpn.service has finished with a failure.
░░
░░ The job identifier is 565 and the job result is failed.
Dec 23 20:15:26 DietPi systemd[1]: Starting dietpi-vpn.service - VPN Client (DietPi)...
░░ Subject: A start job for unit dietpi-vpn.service has begun execution
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A start job for unit dietpi-vpn.service has begun execution.
░░
░░ The job identifier is 644.
Dec 23 20:15:26 DietPi openvpn[16210]: DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations.
Dec 23 20:15:26 DietPi openvpn[16210]: Note: Kernel support for ovpn-dco missing, disabling data channel offload.
Dec 23 20:15:26 DietPi openvpn[16210]: Options error: --ca fails with 'ca.crt': No such file or directory (errno=2)
Dec 23 20:15:26 DietPi openvpn[16210]: Options error: --cert fails with 'client.crt': No such file or directory (errno=2)
Dec 23 20:15:26 DietPi openvpn[16210]: WARNING: cannot stat file 'client.key': No such file or directory (errno=2)
Dec 23 20:15:26 DietPi openvpn[16210]: Options error: --key fails with 'client.key': No such file or directory (errno=2)
Dec 23 20:15:26 DietPi openvpn[16210]: Options error: Please correct these errors.
Dec 23 20:15:26 DietPi openvpn[16210]: Use --help for more information.
Dec 23 20:15:26 DietPi systemd[1]: dietpi-vpn.service: Main process exited, code=exited, status=1/FAILURE
░░ Subject: Unit process exited
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ An ExecStart= process belonging to unit dietpi-vpn.service has exited.
░░
░░ The process' exit code is 'exited' and its exit status is 1.
Dec 23 20:15:26 DietPi systemd[1]: dietpi-vpn.service: Failed with result 'exit-code'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ The unit dietpi-vpn.service has entered the 'failed' state with result 'exit-code'.
Dec 23 20:15:26 DietPi systemd[1]: Failed to start dietpi-vpn.service - VPN Client (DietPi).
░░ Subject: A start job for unit dietpi-vpn.service has failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A start job for unit dietpi-vpn.service has finished with a failure.
░░
░░ The job identifier is 644 and the job result is failed.
Dec 23 20:17:44 DietPi systemd[1]: Starting dietpi-vpn.service - VPN Client (DietPi)...
░░ Subject: A start job for unit dietpi-vpn.service has begun execution
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A start job for unit dietpi-vpn.service has begun execution.
░░
░░ The job identifier is 723.
Dec 23 20:17:44 DietPi openvpn[17277]: DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations.
Dec 23 20:17:44 DietPi openvpn[17277]: Note: Kernel support for ovpn-dco missing, disabling data channel offload.
Dec 23 20:17:44 DietPi openvpn[17277]: Options error: --ca fails with 'ca.crt': No such file or directory (errno=2)
Dec 23 20:17:44 DietPi openvpn[17277]: Options error: --cert fails with 'client.crt': No such file or directory (errno=2)
Dec 23 20:17:44 DietPi openvpn[17277]: WARNING: cannot stat file 'client.key': No such file or directory (errno=2)
Dec 23 20:17:44 DietPi openvpn[17277]: Options error: --key fails with 'client.key': No such file or directory (errno=2)
Dec 23 20:17:44 DietPi openvpn[17277]: Options error: Please correct these errors.
Dec 23 20:17:44 DietPi openvpn[17277]: Use --help for more information.
Dec 23 20:17:44 DietPi systemd[1]: dietpi-vpn.service: Main process exited, code=exited, status=1/FAILURE
░░ Subject: Unit process exited
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ An ExecStart= process belonging to unit dietpi-vpn.service has exited.
░░
░░ The process' exit code is 'exited' and its exit status is 1.
Dec 23 20:17:44 DietPi systemd[1]: dietpi-vpn.service: Failed with result 'exit-code'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ The unit dietpi-vpn.service has entered the 'failed' state with result 'exit-code'.
Dec 23 20:17:44 DietPi systemd[1]: Failed to start dietpi-vpn.service - VPN Client (DietPi).
░░ Subject: A start job for unit dietpi-vpn.service has failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A start job for unit dietpi-vpn.service has finished with a failure.
░░
░░ The job identifier is 723 and the job result is failed.
root@DietPi:~#
22

Looks like you should contact your VPN provider to check on all this depreciated option. I guess there you got the client config from.

23

While the cipher option seems to be wrong as well for modern OpenVPN versions, it is a warning only. The error is the same as for OP about the missing dedicated certificate and key files. Please see my last comment above about copying those into /etc/openvpn.

24

those files are in /etc/openvpn

image
image1281×642 44.2 KB

EDIT: So i reimported the files over and it is now working fine now

1 Like
25

Great. I’ll thinking whether we should add some generic check for such files within the OVPN config dir (and of the related config keys in the config) or just add Cyberghost as native option to dietpi-vpn. Not sure how common it is among VPN providers to ship certs/keys separately.

26

yeah it connects now but disconnects after a few mins. after new year when i get more time i’ll contact CyberGhost support to see if theres an issue with connections

27

Did you manage to get this to work? I’m having issues myself. I didn’t use the guide from the cyberghost website, instead I used the Dietpi-vpn setup. The connection is established but it doesn’t give me internet access.

28

I’m in the same boat. I’ve been trying all day to get this to work and ran in to the same issues line by line as OP

29

The original issue was created in 2021. Please open a new own issue and provide all necessary information.