I use ntpdate and specify a NTP server in its config. This will correct the
time right after your box is up. Make sure you allow your box to connect to
that server. If you have an internal NTP server, it would be good.
----- Original Message -----
From: "Bob von Knobloch" <[EMAIL PROTECTED]>
To: "LEAF Request" <[email protected]>
Sent: Friday, January 20, 2006 4:38 AM
Subject: [leaf-user] Openvpn - Bering uClibc 2.3
Dear List,
I have now succeeded in installing an OpenVPNZ on my WRAP LEAF Box.
Everything works very well. This sort of surprised me, I am used to
working with professional IKE/IPSEC VPNs and OpenVPN seems at least as
good.
For information, one small problem remains that is LEAF orientated: The
boot-up process starts OpenVPN too soon, ntpsimpl needs to be started
first. This acn be fixed but ntpsimpl, although modified with a script
from Erich Titl does not actually set the system date for quite some time
after it has fetched the time from the Internet.
For OpenVPN this causes the startup process to reject all local
Certificates as being invalid (this is true - when a Certificate's date
lies in the apparent future, the Certificate is indeed not valid).
This is not corrected by waiting. A new reboot is required. (To reiterate,
the problem is caused by the ISP rejecting logon attempts for a period
shortly after a disconnect - for example a 10 second power failure would
cause the system to fail and stay failed).
I will think about this and experiment with solutions. Any suggestions
are, of course, very welcome.
Bob
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
------------------------------------------------------------------------
leaf-user mailing list: [email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/
