ExpressVPN at startup

Help and Support Raspberry Pi
1

Hi all,

I cannot for the life of me figure out how to properly create a service to run ExpressVPN after boot on my rpi3. I’m able to SSH in & run it manually with the “expressvpn connect” command. I’ve attempted to change the rc.local and also to create a custom service and executable. Am I overcomplicating this?

2
1 Like
3

I did at one point try this and kept receiving an AUTH failure.

4

Hi,

Ok sounds like it needs a couple of extra steps:

<something>.conf - replace auth-user-pass with:

auth-user-pass /etc/openvpn/password

vi /etc/openvpn/password:

USERNAME
PASSWORD

Replace the above with username & password from ExpressVPN.

sudo systemctl start openvpn@something

If not please provide the output of:

systemctl status openvpn@something

Thanks Tom.

5

Dec 27 16:40:41 osmc ovpn-newjersey[1692]: WARNING: this configuration may cache passwords in memory – use t
Dec 27 16:40:41 osmc ovpn-newjersey[1692]: VERIFY OK: depth=1, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=
Dec 27 16:40:41 osmc ovpn-newjersey[1692]: VERIFY OK: nsCertType=SERVER
Dec 27 16:40:41 osmc ovpn-newjersey[1692]: VERIFY X509NAME OK: C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=
Dec 27 16:40:41 osmc ovpn-newjersey[1692]: VERIFY OK: depth=0, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=
Dec 27 16:40:41 osmc ovpn-newjersey[1692]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-
Dec 27 16:40:41 osmc ovpn-newjersey[1692]: [Server-3550-0a] Peer Connection Initiated with [AF_INET]173.214.1
Dec 27 16:40:42 osmc ovpn-newjersey[1692]: SENT CONTROL [Server-3550-0a]: ‘PUSH_REQUEST’ (status=1)
Dec 27 16:40:42 osmc ovpn-newjersey[1692]: AUTH: Received control message: AUTH_FAILED
Dec 27 16:40:42 osmc ovpn-newjersey[1692]: SIGTERM[soft,auth-failure] received, process exiting

6

Hi,

try adding:

tls-version-min 1.0

to

<something>.conf

Thanks Tom.

7

I missed two characters in the credentials. Everything is up and running. Thanks, you’re a life saver.

1 Like