CyberGhost: Help with custom provider

[FilipLaurentiu]

Hello guys, I am quite a noob so I hope I provide enough details to understand my problem ( without revealing my credentials..)
My VPN provider is CyberGhost and is not supported by default so I need to create a custom profile.
I download the files from the provider, openvpn.ovpn, client.key, client.crt, ca.crt then link the folder to the container path /etc/openvpn/custom

The container starts, but fails with :

Sun Jan 16 10:41:07 2022 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sun Jan 16 10:41:07 2022 VERIFY EKU OK
Sun Jan 16 10:41:07 2022 VERIFY OK: depth=0, CN=bucharest-rack408.nodes.gen4.ninja
Sun Jan 16 10:41:08 2022 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1569', remote='link-mtu 1549'
Sun Jan 16 10:41:08 2022 WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher AES-128-GCM'
Sun Jan 16 10:41:08 2022 WARNING: 'auth' is used inconsistently, local='auth SHA256', remote='auth [null-digest]'
Sun Jan 16 10:41:08 2022 WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128'
Sun Jan 16 10:41:08 2022 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 4096 bit RSA
Sun Jan 16 10:41:08 2022 [bucharest-rack408.nodes.gen4.ninja] Peer Connection Initiated with [AF_INET]85.9.20.137:443
Sun Jan 16 10:41:09 2022 SENT CONTROL [bucharest-rack408.nodes.gen4.ninja]: 'PUSH_REQUEST' (status=1)
Sun Jan 16 10:41:09 2022 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,route-ipv6 2000::/3,dhcp-option DNS 10.0.0.243,route-gateway 10.7.4.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.7.4.157 255.255.255.0,peer-id 23'
Sun Jan 16 10:41:09 2022 OPTIONS IMPORT: timers and/or timeouts modified
Sun Jan 16 10:41:09 2022 OPTIONS IMPORT: --ifconfig/up options modified
Sun Jan 16 10:41:09 2022 OPTIONS IMPORT: route options modified
Sun Jan 16 10:41:09 2022 OPTIONS IMPORT: route-related options modified
Sun Jan 16 10:41:09 2022 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sun Jan 16 10:41:09 2022 OPTIONS IMPORT: peer-id set
Sun Jan 16 10:41:09 2022 OPTIONS IMPORT: adjusting link_mtu to 1624
Sun Jan 16 10:41:09 2022 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Sun Jan 16 10:41:09 2022 Outgoing Data Channel: Using 256 bit message hash 'SHA256' for HMAC authentication
Sun Jan 16 10:41:09 2022 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Sun Jan 16 10:41:09 2022 Incoming Data Channel: Using 256 bit message hash 'SHA256' for HMAC authentication
Sun Jan 16 10:41:09 2022 ROUTE_GATEWAY 172.17.0.1/255.255.0.0 IFACE=eth0 HWADDR=02:42:ac:11:00:07
Sun Jan 16 10:41:09 2022 GDG6: remote_host_ipv6=n/a
Sun Jan 16 10:41:09 2022 ROUTE6: default_gateway=UNDEF
Sun Jan 16 10:41:09 2022 OpenVPN ROUTE6: OpenVPN needs a gateway parameter for a --route-ipv6 option and no default was specified by either --route-ipv6-gateway or --ifconfig-ipv6 options
Sun Jan 16 10:41:09 2022 OpenVPN ROUTE: failed to parse/resolve route for host/network: 2000::/3
Sun Jan 16 10:41:09 2022 ERROR: Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1)
Sun Jan 16 10:41:09 2022 Exiting due to fatal error

[pkishino]

whats your platform and docker run command?

[FilipLaurentiu]

whats your platform and docker run command?

It's a Synology NAS

[pkishino]

always some problems with synology.. you need to enable higher privilege afaik, see other discussion/issues about this

[FilipLaurentiu]

always some problems with synology.. you need to enable higher privilege afaik, see other discussion/issues about this

#1839 (comment)
This fix my problem. Thank you :) Seems to work now