OpenVPN Now Requires Auth Password

[gw1500se]

I have a python script that runs as root which was working fine until an update installed OpenSSL 1.0.2k-fips. This changed something that now tries to prompt for an auth password. Since this runs in background it creates an obvious problem. I tried looking though the release notes but I cannot find anything about this. What feature was added and/or turned on by this update and how do I either provide the password or turn that requirement off? A password is already required to run this script as sudo so why do I need a 2nd? the script launches openvpn which is where openssl is used so I can't change it there. TIA.

[avij]

openssl or openssh? What's the output of rpm -qa openssl\* openssh\* ?

[gw1500se]

Thanks for the reply. The error says OpenSSL. Here is the full output:

Mon Aug 6 07:51:59 2018 OpenVPN 2.4.6 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Apr 26 2018
Mon Aug 6 07:51:59 2018 library versions: OpenSSL 1.0.2k-fips 26 Jan 2017, LZO 2.06
Enter Auth Password:

The rpm output is:

openssl-libs-1.0.2k-12.el7.x86_64
openssh-7.4p1-16.el7.x86_64
openssh-clients-7.4p1-16.el7.x86_64
openssl-libs-1.0.2k-12.el7.i686
openssh-server-7.4p1-16.el7.x86_64
openssl-1.0.2k-12.el7.x86_64

[avij]

This smells more like an OpenVPN problem to me. I don't see how openssl could affect this.

I'm not using OpenVPN, but this Ubuntu problem sounds similar to yours.

If others using OpenVPN know any better, please chime in.

[gw1500se]

Thanks. That link seems to confirm your suspicion that this is an openvpn problem but the Centos version seems to be set up completely different. I'm searching around but so far nothing. I also don't see where openvpn was updated to make is suddenly different but I may have missed it.

[Mike_Rochefort]

Have you checked the changelog? Just see see what’s different from the last version to this one?

Code: Select all

rpm -q openvpn —changelog | less

Cheers,
Mike

[gw1500se]

rpm -q --changelog openvpn|less

Thu Apr 26 2018 David Sommerseth <dazo@eurephia.org> - 2.4.6-1
- Updating to upstream, openvpn-2.4.6

That is the lastest update which means it may go back to an OpenSSL problem. This failure did not start until OpenSSL was updated (among other things) last week.

[TrevorH]

Yes but when did you install it? rpm -qi openvpn and look for Install Date.

[gw1500se]

It doesn't give the install date but I update quite frequently so it had to be somewhere around Apr-May.

[TrevorH]

It does, you must've just missed it. try

rpm -qi openvpn | grep Install