Missing package, data for<tls-crypt>in Raspbx

[ovpnewbie]

Hello Team,
Couldnt find anyone else reporting this issue, I am facing trouble while installing the script in Raspbx. Details of OS, error and logs shared below. Kindly advice how to fix and make it work.

Thank you very much.

Description of the issue:

1. Err:6 http://raspbian.raspberrypi.org/raspbian buster/main armhf openvpn armhf 2.4.7-1
   404 Not Found [IP: 93.93.128.193 80]

2. ./openvpn-install.sh: line 745: openvpn: command not found

3. cp: cannot stat '/lib/systemd/system/openvpn@.service': No such file or directory
   sed: can't read /etc/systemd/system/openvpn@.service: No such file or directory
   sed: can't read /etc/systemd/system/openvpn@.service: No such file or directory
   Failed to enable unit: Unit file openvpn@server.service does not exist.
   Failed to restart openvpn@server.service: Unit openvpn@server.service not found.

4. Client ovpn files missing data for tls-crypt, not able to load .ovpn file to client software/app.

Server/Client versions (OS, OpenVPN, etc) : RasPBX images based on Raspbian 10 Buster raspbx-10-10-2020.img

-Start of Log-

Okay, that was all I needed. We are ready to setup your OpenVPN server now.
You will be able to generate a client at the end of the installation.
Press any key to continue...
Get:1 https://packages.sury.org/php buster InRelease [6,837 B]
Hit:2 http://repo.raspbx.org/apt/debian buster InRelease
Get:3 http://archive.raspberrypi.org/debian buster InRelease [32.6 kB]
Err:1 https://packages.sury.org/php buster InRelease
The following signatures were invalid: EXPKEYSIG B188E2B695BD4743 DEB.SURY.ORG Automatic Signing Key deb@sury.org
Get:4 http://raspbian.raspberrypi.org/raspbian buster InRelease [15.0 kB]
Reading package lists... Done
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://packages.sury.org/php buster InRelease: The following signatures were invalid: EXPKEYSIG B188E2B695BD4743 DEB.SURY.ORG Automatic Signing Key deb@sury.org
E: Repository 'http://archive.raspberrypi.org/debian buster InRelease' changed its 'Suite' value from 'testing' to 'oldstable'
N: This must be accepted explicitly before updates for this repository can be applied. See apt-secure(8) manpage for details.
E: Repository 'http://raspbian.raspberrypi.org/raspbian buster InRelease' changed its 'Suite' value from 'stable' to 'oldstable'
N: This must be accepted explicitly before updates for this repository can be applied. See apt-secure(8) manpage for details.
Reading package lists... Done
Building dependency tree
Reading state information... Done
ca-certificates is already the newest version (20200601 deb10u1).
gnupg is already the newest version (2.2.12-1+rpi1+deb10u1).
0 upgraded, 0 newly installed, 0 to remove and 1 not upgraded.
Reading package lists... Done
Building dependency tree
Reading state information... Done
ca-certificates is already the newest version (20200601 deb10u1).
curl is already the newest version (7.64.0-4+deb10u1).
iptables is already the newest version (1.8.2-4).
wget is already the newest version (1.20.1-1.1).
wget set to manually installed.
openssl is already the newest version (1.1.1g-1+0 20200421.17+debian10 1.gbpf6902f).
openssl set to manually installed.
The following additional packages will be installed:
easy-rsa libccid libpkcs11-helper1 opensc opensc-pkcs11 pcscd
Suggested packages:
pcmciautils openvpn-systemd-resolved
The following NEW packages will be installed:
easy-rsa libccid libpkcs11-helper1 opensc opensc-pkcs11 openvpn pcscd
0 upgraded, 7 newly installed, 0 to remove and 1 not upgraded.
Need to get 1,910 kB of archives.
After this operation, 5,293 kB of additional disk space will be used.
Get:1 http://mirror.ossplanet.net/raspbian/raspbian buster/main armhf easy-rsa all 3.0.6-1 [37.9 kB]
Get:2 http://mirror.ossplanet.net/raspbian/raspbian buster/main armhf libccid armhf 1.4.30-1 [328 kB]
Get:3 http://mirror.ossplanet.net/raspbian/raspbian buster/main armhf libpkcs11-helper1 armhf 1.25.1-1 [41.9 kB]
Get:4 http://mirror.ossplanet.net/raspbian/raspbian buster/main armhf opensc-pkcs11 armhf 0.19.0-1 [718 kB]
Get:5 http://mirror.ossplanet.net/raspbian/raspbian buster/main armhf opensc armhf 0.19.0-1 [274 kB]
Err:6 http://raspbian.raspberrypi.org/raspbian buster/main armhf openvpn armhf 2.4.7-1
404 Not Found [IP: 93.93.128.193 80]
Get:7 http://mirror.ossplanet.net/raspbian/raspbian buster/main armhf pcscd armhf 1.8.24-1 [84.8 kB]
Fetched 1,484 kB in 3s (443 kB/s)
E: Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/o/openvpn/openvpn_2.4.7-1_armhf.deb 404 Not Found [IP: 93.93.128.193 80]
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?
--2021-11-08 16:08:45-- https://github.com/OpenVPN/easy-rsa/releases/download/v3.0.7/EasyRSA-3.0.7.tgz
Resolving github.com (github.com)... 13.234.210.38
Connecting to github.com (github.com)|13.234.210.38|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://github-releases.githubusercontent.com/4519663/0fa24e00-72ba-11ea-9afe-6e5829eec4a4?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20211108%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20211108T160845Z&X-Amz-Expires=300&X-Amz-Signature=a1af80124b253c1f31058ac02a75008f7ae1fb9deaef2b3f430254e8c3672b4a&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=4519663&response-content-disposition=attachment%3B%20filename%3DEasyRSA-3.0.7.tgz&response-content-type=application%2Foctet-stream [following]
--2021-11-08 16:08:45-- https://github-releases.githubusercontent.com/4519663/0fa24e00-72ba-11ea-9afe-6e5829eec4a4?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20211108%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20211108T160845Z&X-Amz-Expires=300&X-Amz-Signature=a1af80124b253c1f31058ac02a75008f7ae1fb9deaef2b3f430254e8c3672b4a&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=4519663&response-content-disposition=attachment%3B%20filename%3DEasyRSA-3.0.7.tgz&response-content-type=application%2Foctet-stream
Resolving github-releases.githubusercontent.com (github-releases.githubusercontent.com)... 185.199.111.154, 185.199.109.154, 185.199.108.154, ...
Connecting to github-releases.githubusercontent.com (github-releases.githubusercontent.com)|185.199.111.154|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 48215 (47K) [application/octet-stream]
Saving to: â/root/easy-rsa.tgzâ
/root/easy-rsa.tgz 100%[======================>] 47.08K --.-KB/s in 0.02s

2021-11-08 16:08:46 (2.39 MB/s) - â/root/easy-rsa.tgzâ saved [48215/48215]
Note: using Easy-RSA configuration from: /etc/openvpn/easy-rsa/vars

init-pki complete; you may now create a CA or requests.
Your newly created PKI dir is: /etc/openvpn/easy-rsa/pki

Using SSL: openssl OpenSSL 1.1.1g 21 Apr 2020
read EC key
writing EC key

Note:using Easy-RSA configuration from: /etc/openvpn/easy-rsa/vars
Using SSL: openssl OpenSSL 1.1.1g 21 Apr 2020
Generating an EC private key
writing new private key to '/etc/openvpn/easy-rsa/pki/easy-rsa-4255.ArQ9xl/tmp.BU64RW'

Using configuration from /etc/openvpn/easy-rsa/pki/easy-rsa-4255.ArQ9xl/tmp.JJE1Bi
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
commonName :ASN.1 12:'server_L4zTN4UnhXuGmEdf'
Certificate is to be certified until Feb 11 16:08:47 2024 GMT (825 days)

Write out database with 1 new entries
Data Base Updated

Note: using Easy-RSA configuration from: /etc/openvpn/easy-rsa/vars
Using SSL: openssl OpenSSL 1.1.1g 21 Apr 2020
Using configuration from /etc/openvpn/easy-rsa/pki/easy-rsa-4332.0eL88n/tmp.F7cSIx

An updated CRL has been created.
CRL file: /etc/openvpn/easy-rsa/pki/crl.pem

./openvpn-install.sh: line 745: openvpn: command not found

• Applying /etc/sysctl.d/98-rpi.conf ...
  kernel.printk = 3 4 1 3
  vm.min_free_kbytes = 16384
• Applying /etc/sysctl.d/99-openvpn.conf ...
  net.ipv4.ip_forward = 1
• Applying /etc/sysctl.d/99-sysctl.conf ...
  vm.swappiness = 1
  vm.min_free_kbytes = 16384
• Applying /etc/sysctl.d/protect-links.conf ...
  fs.protected_hardlinks = 1
  fs.protected_symlinks = 1
• Applying /etc/sysctl.conf ...
  vm.swappiness = 1
  vm.min_free_kbytes = 16384
  cp: cannot stat '/lib/systemd/system/openvpn@.service': No such file or directory
  sed: can't read /etc/systemd/system/openvpn@.service: No such file or directory
  sed: can't read /etc/systemd/system/openvpn@.service: No such file or directory
  Failed to enable unit: Unit file openvpn@server.service does not exist.
  Failed to restart openvpn@server.service: Unit openvpn@server.service not found.
  Created symlink /etc/systemd/system/multi-user.target.wants/iptables-openvpn.service
  â /etc/systemd/system/iptables-openvpn.service.

Tell me a name for the client.

-End of Log-

[camzilla1050]

Same issue solved:
can't find openvpn because path is not reported. Try this:
export PATH=$PATH:/usr/sbin

After I reinstalled and have tls-crypt for client

[ovpnewbie]

Same issue solved: can't find openvpn because path is not reported. Try this: export PATH=$PATH:/usr/sbin

Hello camzilla1050,
Tried your method after downloading the script and before running and after running the script, the same error no tls-crypt :(
If you see the original error log above, it says a package cannot be downloaded:
Failed to fetch http://raspbian.raspberrypi.org/raspbian/pool/main/o/openvpn/openvpn_2.4.7-1_armhf.deb 404 Not Found [IP: 93.93.128.193 80]
Maybe this is the real reason for error and can be fixed?

-Start of Log-

root@raspbx:# export PATH=$PATH:/usr/sbin
root@raspbx:# ./openvpn-install.sh
Welcome to OpenVPN-install!
The git repository is available at: https://github.com/angristan/openvpn-install

It looks like OpenVPN is already installed.

What do you want to do?

1. Add a new user
2. Revoke existing user
3. Remove OpenVPN
4. Exit
   Select an option [1-4]: 1

Tell me a name for the client.
The name must consist of alphanumeric character. It may also include an underscore o r a dash.
Client name: test1

Do you want to protect the configuration file with a password?
(e.g. encrypt the private key with a password)

1. Add a passwordless client
2. Use a password for the client
   Select an option [1-2]: 1

Note: using Easy-RSA configuration from: /etc/openvpn/easy-rsa/vars
Using SSL: openssl OpenSSL 1.1.1g 21 Apr 2020
Generating an EC private key
writing new private key to '/etc/openvpn/easy-rsa/pki/easy-rsa-4397.LHq1EH/tmp.ZDwQZ

Using configuration from /etc/openvpn/easy-rsa/pki/easy-rsa-4397.LHq1EH/tmp.Uaul8I
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
commonName :ASN.1 12:'test1'
Certificate is to be certified until Feb 24 08:09:53 2024 GMT (825 days)

Write out database with 1 new entries
Data Base Updated

Client test1 added.
cat: /etc/openvpn/tls-crypt.key: No such file or directory

The configuration file has been written to /root/test1.ovpn.
Download the .ovpn file and import it in your OpenVPN client.
root@raspbx:~#
-End of Log-