Hi !
I've configured openvpn with RSA keys for multiple clients and
start well. I used this guide
https://wiki.debian.org/OpenVPN#TLS-enabled_VPN
However clients would not connect. Nothing was noted in the clients log
file. Simply empty.
So was wondering if somebody would be able to help me out!
Kind regards, Sophie.
When I start I had this,
------------------------------------------------------
# openvpn --dev tun1 --ifconfig 10.9.8.1 10.9.8.2 --tls-server --dh
/etc/openvpn/easy-rsa/keys/dh1024.pem --ca
/etc/openvpn/easy-rsa/keys/ca.crt --cert
/etc/openvpn/easy-rsa/keys/server.crt --key
/etc/openvpn/easy-rsa/keys/server.key --reneg-sec 60 --verb 5 &
[1] 3389
# Mon Dec 22 16:04:24 2014 us=616124 Current Parameter Settings:
Mon Dec 22 16:04:24 2014 us=616194 config = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=616207 mode = 0
Mon Dec 22 16:04:24 2014 us=616218 persist_config = DISABLED
Mon Dec 22 16:04:24 2014 us=616234 persist_mode = 1
Mon Dec 22 16:04:24 2014 us=616244 show_ciphers = DISABLED
Mon Dec 22 16:04:24 2014 us=616254 show_digests = DISABLED
Mon Dec 22 16:04:24 2014 us=616264 show_engines = DISABLED
Mon Dec 22 16:04:24 2014 us=616274 genkey = DISABLED
Mon Dec 22 16:04:24 2014 us=616285 key_pass_file = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=616295 show_tls_ciphers = DISABLED
Mon Dec 22 16:04:24 2014 us=616305 Connection profiles [default]:
Mon Dec 22 16:04:24 2014 us=616316 proto = udp
Mon Dec 22 16:04:24 2014 us=616326 local = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=616336 local_port = 1194
Mon Dec 22 16:04:24 2014 us=616346 remote = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=616356 remote_port = 1194
Mon Dec 22 16:04:24 2014 us=616396 remote_float = DISABLED
Mon Dec 22 16:04:24 2014 us=616407 bind_defined = DISABLED
Mon Dec 22 16:04:24 2014 us=616419 bind_local = ENABLED
Mon Dec 22 16:04:24 2014 us=616428 connect_retry_seconds = 5
Mon Dec 22 16:04:24 2014 us=616437 connect_timeout = 10
Mon Dec 22 16:04:24 2014 us=616446 connect_retry_max = 0
Mon Dec 22 16:04:24 2014 us=616455 socks_proxy_server = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=616464 socks_proxy_port = 0
Mon Dec 22 16:04:24 2014 us=616473 socks_proxy_retry = DISABLED
Mon Dec 22 16:04:24 2014 us=616482 Connection profiles END
Mon Dec 22 16:04:24 2014 us=616491 remote_random = DISABLED
Mon Dec 22 16:04:24 2014 us=616500 ipchange = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=616509 dev = 'tun1'
Mon Dec 22 16:04:24 2014 us=616518 dev_type = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=616529 dev_node = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=616540 lladdr = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=616549 topology = 1
Mon Dec 22 16:04:24 2014 us=616558 tun_ipv6 = DISABLED
Mon Dec 22 16:04:24 2014 us=616567 ifconfig_local = '10.9.8.1'
Mon Dec 22 16:04:24 2014 us=616576 ifconfig_remote_netmask = '10.9.8.2'
Mon Dec 22 16:04:24 2014 us=616585 ifconfig_noexec = DISABLED
Mon Dec 22 16:04:24 2014 us=616595 ifconfig_nowarn = DISABLED
Mon Dec 22 16:04:24 2014 us=616604 ifconfig_ipv6_local = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=616613 ifconfig_ipv6_netbits = 0
Mon Dec 22 16:04:24 2014 us=616622 ifconfig_ipv6_remote = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=616632 shaper = 0
Mon Dec 22 16:04:24 2014 us=616643 tun_mtu = 1500
Mon Dec 22 16:04:24 2014 us=616653 tun_mtu_defined = ENABLED
Mon Dec 22 16:04:24 2014 us=616662 link_mtu = 1500
Mon Dec 22 16:04:24 2014 us=616671 link_mtu_defined = DISABLED
Mon Dec 22 16:04:24 2014 us=616680 tun_mtu_extra = 0
Mon Dec 22 16:04:24 2014 us=616689 tun_mtu_extra_defined = DISABLED
Mon Dec 22 16:04:24 2014 us=616698 fragment = 0
Mon Dec 22 16:04:24 2014 us=616707 mtu_discover_type = -1
Mon Dec 22 16:04:24 2014 us=616717 mtu_test = 0
Mon Dec 22 16:04:24 2014 us=616726 mlock = DISABLED
Mon Dec 22 16:04:24 2014 us=616735 keepalive_ping = 0
Mon Dec 22 16:04:24 2014 us=616744 keepalive_timeout = 0
Mon Dec 22 16:04:24 2014 us=616753 inactivity_timeout = 0
Mon Dec 22 16:04:24 2014 us=616762 ping_send_timeout = 0
Mon Dec 22 16:04:24 2014 us=616772 ping_rec_timeout = 0
Mon Dec 22 16:04:24 2014 us=616780 ping_rec_timeout_action = 0
Mon Dec 22 16:04:24 2014 us=616789 ping_timer_remote = DISABLED
Mon Dec 22 16:04:24 2014 us=616798 remap_sigusr1 = 0
Mon Dec 22 16:04:24 2014 us=616808 explicit_exit_notification = 0
Mon Dec 22 16:04:24 2014 us=616817 persist_tun = DISABLED
Mon Dec 22 16:04:24 2014 us=616827 persist_local_ip = DISABLED
Mon Dec 22 16:04:24 2014 us=616836 persist_remote_ip = DISABLED
Mon Dec 22 16:04:24 2014 us=616845 persist_key = DISABLED
Mon Dec 22 16:04:24 2014 us=616855 mssfix = 1450
Mon Dec 22 16:04:24 2014 us=616865 passtos = DISABLED
Mon Dec 22 16:04:24 2014 us=616875 resolve_retry_seconds = 1000000000
Mon Dec 22 16:04:24 2014 us=616884 username = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=616893 groupname = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=616901 chroot_dir = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=616910 cd_dir = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=616921 writepid = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=616931 up_script = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=616940 down_script = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=616949 down_pre = DISABLED
Mon Dec 22 16:04:24 2014 us=616958 up_restart = DISABLED
Mon Dec 22 16:04:24 2014 us=616968 up_delay = DISABLED
Mon Dec 22 16:04:24 2014 us=616978 daemon = DISABLED
Mon Dec 22 16:04:24 2014 us=616986 inetd = 0
Mon Dec 22 16:04:24 2014 us=616996 log = DISABLED
Mon Dec 22 16:04:24 2014 us=617005 suppress_timestamps = DISABLED
Mon Dec 22 16:04:24 2014 us=617016 nice = 0
Mon Dec 22 16:04:24 2014 us=617025 verbosity = 5
Mon Dec 22 16:04:24 2014 us=617034 mute = 0
Mon Dec 22 16:04:24 2014 us=617043 gremlin = 0
Mon Dec 22 16:04:24 2014 us=617052 status_file = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617063 status_file_version = 1
Mon Dec 22 16:04:24 2014 us=617073 status_file_update_freq = 60
Mon Dec 22 16:04:24 2014 us=617082 occ = ENABLED
Mon Dec 22 16:04:24 2014 us=617092 rcvbuf = 65536
Mon Dec 22 16:04:24 2014 us=617102 sndbuf = 65536
Mon Dec 22 16:04:24 2014 us=617112 sockflags = 0
Mon Dec 22 16:04:24 2014 us=617121 fast_io = DISABLED
Mon Dec 22 16:04:24 2014 us=617130 lzo = 0
Mon Dec 22 16:04:24 2014 us=617139 route_script = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617148 route_default_gateway = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617157 route_default_metric = 0
Mon Dec 22 16:04:24 2014 us=617167 route_noexec = DISABLED
Mon Dec 22 16:04:24 2014 us=617177 route_delay = 0
Mon Dec 22 16:04:24 2014 us=617187 route_delay_window = 30
Mon Dec 22 16:04:24 2014 us=617198 route_delay_defined = DISABLED
Mon Dec 22 16:04:24 2014 us=617208 route_nopull = DISABLED
Mon Dec 22 16:04:24 2014 us=617218 route_gateway_via_dhcp = DISABLED
Mon Dec 22 16:04:24 2014 us=617232 max_routes = 100
Mon Dec 22 16:04:24 2014 us=617242 allow_pull_fqdn = DISABLED
Mon Dec 22 16:04:24 2014 us=617252 management_addr = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617262 management_port = 0
Mon Dec 22 16:04:24 2014 us=617271 management_user_pass = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617282 management_log_history_cache = 250
Mon Dec 22 16:04:24 2014 us=617291 management_echo_buffer_size = 100
Mon Dec 22 16:04:24 2014 us=617301 management_write_peer_info_file =
'[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617311 management_client_user = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617321 management_client_group = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617331 management_flags = 0
Mon Dec 22 16:04:24 2014 us=617341 shared_secret_file = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617351 key_direction = 0
Mon Dec 22 16:04:24 2014 us=617361 ciphername_defined = ENABLED
Mon Dec 22 16:04:24 2014 us=617371 ciphername = 'BF-CBC'
Mon Dec 22 16:04:24 2014 us=617380 authname_defined = ENABLED
Mon Dec 22 16:04:24 2014 us=617389 authname = 'SHA1'
Mon Dec 22 16:04:24 2014 us=617398 prng_hash = 'SHA1'
Mon Dec 22 16:04:24 2014 us=617407 prng_nonce_secret_len = 16
Mon Dec 22 16:04:24 2014 us=617416 keysize = 0
Mon Dec 22 16:04:24 2014 us=617430 engine = DISABLED
Mon Dec 22 16:04:24 2014 us=617442 replay = ENABLED
Mon Dec 22 16:04:24 2014 us=617452 mute_replay_warnings = DISABLED
Mon Dec 22 16:04:24 2014 us=617465 replay_window = 64
Mon Dec 22 16:04:24 2014 us=617475 replay_time = 15
Mon Dec 22 16:04:24 2014 us=617485 packet_id_file = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617494 use_iv = ENABLED
Mon Dec 22 16:04:24 2014 us=617504 test_crypto = DISABLED
Mon Dec 22 16:04:24 2014 us=617515 tls_server = ENABLED
Mon Dec 22 16:04:24 2014 us=617526 tls_client = DISABLED
Mon Dec 22 16:04:24 2014 us=617535 key_method = 2
Mon Dec 22 16:04:24 2014 us=617545 ca_file =
'/etc/openvpn/easy-rsa/keys/ca.crt'
Mon Dec 22 16:04:24 2014 us=617556 ca_path = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617567 dh_file =
'/etc/openvpn/easy-rsa/keys/dh1024.pem'
Mon Dec 22 16:04:24 2014 us=617577 cert_file =
'/etc/openvpn/easy-rsa/keys/server.crt'
Mon Dec 22 16:04:24 2014 us=617587 priv_key_file =
'/etc/openvpn/easy-rsa/keys/server.key'
Mon Dec 22 16:04:24 2014 us=617597 pkcs12_file = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617607 cipher_list = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617616 tls_verify = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617625 tls_export_cert = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617634 tls_remote = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617643 crl_file = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617651 ns_cert_type = 0
Mon Dec 22 16:04:24 2014 us=617660 remote_cert_ku[i] = 0
Mon Dec 22 16:04:24 2014 us=617670 remote_cert_ku[i] = 0
Mon Dec 22 16:04:24 2014 us=617679 remote_cert_ku[i] = 0
Mon Dec 22 16:04:24 2014 us=617689 remote_cert_ku[i] = 0
Mon Dec 22 16:04:24 2014 us=617699 remote_cert_ku[i] = 0
Mon Dec 22 16:04:24 2014 us=617709 remote_cert_ku[i] = 0
Mon Dec 22 16:04:24 2014 us=617718 remote_cert_ku[i] = 0
Mon Dec 22 16:04:24 2014 us=617728 remote_cert_ku[i] = 0
Mon Dec 22 16:04:24 2014 us=617737 remote_cert_ku[i] = 0
Mon Dec 22 16:04:24 2014 us=617747 remote_cert_ku[i] = 0
Mon Dec 22 16:04:24 2014 us=617757 remote_cert_ku[i] = 0
Mon Dec 22 16:04:24 2014 us=617767 remote_cert_ku[i] = 0
Mon Dec 22 16:04:24 2014 us=617776 remote_cert_ku[i] = 0
Mon Dec 22 16:04:24 2014 us=617785 remote_cert_ku[i] = 0
Mon Dec 22 16:04:24 2014 us=617795 remote_cert_ku[i] = 0
Mon Dec 22 16:04:24 2014 us=617804 remote_cert_ku[i] = 0
Mon Dec 22 16:04:24 2014 us=617814 remote_cert_eku = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617825 tls_timeout = 2
Mon Dec 22 16:04:24 2014 us=617834 renegotiate_bytes = 0
Mon Dec 22 16:04:24 2014 us=617844 renegotiate_packets = 0
Mon Dec 22 16:04:24 2014 us=617854 renegotiate_seconds = 60
Mon Dec 22 16:04:24 2014 us=617864 handshake_window = 60
Mon Dec 22 16:04:24 2014 us=617874 transition_window = 3600
Mon Dec 22 16:04:24 2014 us=617883 single_session = DISABLED
Mon Dec 22 16:04:24 2014 us=617893 push_peer_info = DISABLED
Mon Dec 22 16:04:24 2014 us=617902 tls_exit = DISABLED
Mon Dec 22 16:04:24 2014 us=617912 tls_auth_file = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=617922 pkcs11_protected_authentication =
DISABLED
Mon Dec 22 16:04:24 2014 us=617932 pkcs11_protected_authentication =
DISABLED
Mon Dec 22 16:04:24 2014 us=617942 pkcs11_protected_authentication =
DISABLED
Mon Dec 22 16:04:24 2014 us=617951 pkcs11_protected_authentication =
DISABLED
Mon Dec 22 16:04:24 2014 us=617961 pkcs11_protected_authentication =
DISABLED
Mon Dec 22 16:04:24 2014 us=617971 pkcs11_protected_authentication =
DISABLED
Mon Dec 22 16:04:24 2014 us=617981 pkcs11_protected_authentication =
DISABLED
Mon Dec 22 16:04:24 2014 us=617991 pkcs11_protected_authentication =
DISABLED
Mon Dec 22 16:04:24 2014 us=618001 pkcs11_protected_authentication =
DISABLED
Mon Dec 22 16:04:24 2014 us=618011 pkcs11_protected_authentication =
DISABLED
Mon Dec 22 16:04:24 2014 us=618020 pkcs11_protected_authentication =
DISABLED
Mon Dec 22 16:04:24 2014 us=618030 pkcs11_protected_authentication =
DISABLED
Mon Dec 22 16:04:24 2014 us=618041 pkcs11_protected_authentication =
DISABLED
Mon Dec 22 16:04:24 2014 us=618051 pkcs11_protected_authentication =
DISABLED
Mon Dec 22 16:04:24 2014 us=618061 pkcs11_protected_authentication =
DISABLED
Mon Dec 22 16:04:24 2014 us=618072 pkcs11_protected_authentication =
DISABLED
Mon Dec 22 16:04:24 2014 us=618084 pkcs11_private_mode = 00000000
Mon Dec 22 16:04:24 2014 us=618094 pkcs11_private_mode = 00000000
Mon Dec 22 16:04:24 2014 us=618103 pkcs11_private_mode = 00000000
Mon Dec 22 16:04:24 2014 us=618113 pkcs11_private_mode = 00000000
Mon Dec 22 16:04:24 2014 us=618123 pkcs11_private_mode = 00000000
Mon Dec 22 16:04:24 2014 us=618133 pkcs11_private_mode = 00000000
Mon Dec 22 16:04:24 2014 us=618144 pkcs11_private_mode = 00000000
Mon Dec 22 16:04:24 2014 us=618154 pkcs11_private_mode = 00000000
Mon Dec 22 16:04:24 2014 us=618164 pkcs11_private_mode = 00000000
Mon Dec 22 16:04:24 2014 us=618174 pkcs11_private_mode = 00000000
Mon Dec 22 16:04:24 2014 us=618185 pkcs11_private_mode = 00000000
Mon Dec 22 16:04:24 2014 us=618196 pkcs11_private_mode = 00000000
Mon Dec 22 16:04:24 2014 us=618206 pkcs11_private_mode = 00000000
Mon Dec 22 16:04:24 2014 us=618217 pkcs11_private_mode = 00000000
Mon Dec 22 16:04:24 2014 us=618232 pkcs11_private_mode = 00000000
Mon Dec 22 16:04:24 2014 us=618242 pkcs11_private_mode = 00000000
Mon Dec 22 16:04:24 2014 us=618253 pkcs11_cert_private = DISABLED
Mon Dec 22 16:04:24 2014 us=618263 pkcs11_cert_private = DISABLED
Mon Dec 22 16:04:24 2014 us=618273 pkcs11_cert_private = DISABLED
Mon Dec 22 16:04:24 2014 us=618283 pkcs11_cert_private = DISABLED
Mon Dec 22 16:04:24 2014 us=618293 pkcs11_cert_private = DISABLED
Mon Dec 22 16:04:24 2014 us=618303 pkcs11_cert_private = DISABLED
Mon Dec 22 16:04:24 2014 us=618313 pkcs11_cert_private = DISABLED
Mon Dec 22 16:04:24 2014 us=618323 pkcs11_cert_private = DISABLED
Mon Dec 22 16:04:24 2014 us=618332 pkcs11_cert_private = DISABLED
Mon Dec 22 16:04:24 2014 us=618342 pkcs11_cert_private = DISABLED
Mon Dec 22 16:04:24 2014 us=618352 pkcs11_cert_private = DISABLED
Mon Dec 22 16:04:24 2014 us=618363 pkcs11_cert_private = DISABLED
Mon Dec 22 16:04:24 2014 us=618373 pkcs11_cert_private = DISABLED
Mon Dec 22 16:04:24 2014 us=618383 pkcs11_cert_private = DISABLED
Mon Dec 22 16:04:24 2014 us=618393 pkcs11_cert_private = DISABLED
Mon Dec 22 16:04:24 2014 us=618404 pkcs11_cert_private = DISABLED
Mon Dec 22 16:04:24 2014 us=618414 pkcs11_pin_cache_period = -1
Mon Dec 22 16:04:24 2014 us=618428 pkcs11_id = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=618439 pkcs11_id_management = DISABLED
Mon Dec 22 16:04:24 2014 us=618461 server_network = 0.0.0.0
Mon Dec 22 16:04:24 2014 us=618473 server_netmask = 0.0.0.0
Mon Dec 22 16:04:24 2014 us=618487 server_network_ipv6 = ::
Mon Dec 22 16:04:24 2014 us=618498 server_netbits_ipv6 = 0
Mon Dec 22 16:04:24 2014 us=618509 server_bridge_ip = 0.0.0.0
Mon Dec 22 16:04:24 2014 us=618521 server_bridge_netmask = 0.0.0.0
Mon Dec 22 16:04:24 2014 us=618532 server_bridge_pool_start = 0.0.0.0
Mon Dec 22 16:04:24 2014 us=618544 server_bridge_pool_end = 0.0.0.0
Mon Dec 22 16:04:24 2014 us=618554 ifconfig_pool_defined = DISABLED
Mon Dec 22 16:04:24 2014 us=618564 ifconfig_pool_start = 0.0.0.0
Mon Dec 22 16:04:24 2014 us=618576 ifconfig_pool_end = 0.0.0.0
Mon Dec 22 16:04:24 2014 us=618586 ifconfig_pool_netmask = 0.0.0.0
Mon Dec 22 16:04:24 2014 us=618596 ifconfig_pool_persist_filename =
'[UNDEF]'
Mon Dec 22 16:04:24 2014 us=618606 ifconfig_pool_persist_refresh_freq
= 600
Mon Dec 22 16:04:24 2014 us=618616 ifconfig_ipv6_pool_defined = DISABLED
Mon Dec 22 16:04:24 2014 us=618627 ifconfig_ipv6_pool_base = ::
Mon Dec 22 16:04:24 2014 us=618637 ifconfig_ipv6_pool_netbits = 0
Mon Dec 22 16:04:24 2014 us=618647 n_bcast_buf = 256
Mon Dec 22 16:04:24 2014 us=618657 tcp_queue_limit = 64
Mon Dec 22 16:04:24 2014 us=618667 real_hash_size = 256
Mon Dec 22 16:04:24 2014 us=618676 virtual_hash_size = 256
Mon Dec 22 16:04:24 2014 us=618687 client_connect_script = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=618697 learn_address_script = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=618707 client_disconnect_script = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=618717 client_config_dir = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=618727 ccd_exclusive = DISABLED
Mon Dec 22 16:04:24 2014 us=618737 tmp_dir = '/tmp'
Mon Dec 22 16:04:24 2014 us=618747 push_ifconfig_defined = DISABLED
Mon Dec 22 16:04:24 2014 us=618759 push_ifconfig_local = 0.0.0.0
Mon Dec 22 16:04:24 2014 us=618770 push_ifconfig_remote_netmask = 0.0.0.0
Mon Dec 22 16:04:24 2014 us=618780 push_ifconfig_ipv6_defined = DISABLED
Mon Dec 22 16:04:24 2014 us=618791 push_ifconfig_ipv6_local = ::/0
Mon Dec 22 16:04:24 2014 us=618802 push_ifconfig_ipv6_remote = ::
Mon Dec 22 16:04:24 2014 us=618812 enable_c2c = DISABLED
Mon Dec 22 16:04:24 2014 us=618822 duplicate_cn = DISABLED
Mon Dec 22 16:04:24 2014 us=618832 cf_max = 0
Mon Dec 22 16:04:24 2014 us=618842 cf_per = 0
Mon Dec 22 16:04:24 2014 us=618851 max_clients = 1024
Mon Dec 22 16:04:24 2014 us=618861 max_routes_per_client = 256
Mon Dec 22 16:04:24 2014 us=618871 auth_user_pass_verify_script =
'[UNDEF]'
Mon Dec 22 16:04:24 2014 us=618882
auth_user_pass_verify_script_via_file = DISABLED
Mon Dec 22 16:04:24 2014 us=618892 ssl_flags = 0
Mon Dec 22 16:04:24 2014 us=618902 port_share_host = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=618912 port_share_port = 0
Mon Dec 22 16:04:24 2014 us=618922 client = DISABLED
Mon Dec 22 16:04:24 2014 us=618931 pull = DISABLED
Mon Dec 22 16:04:24 2014 us=618942 auth_user_pass_file = '[UNDEF]'
Mon Dec 22 16:04:24 2014 us=618955 OpenVPN 2.2.1 i486-linux-gnu [SSL]
[LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload
20110424-2 (2.2RC2)] built on Dec 1 2014
Mon Dec 22 16:04:24 2014 us=619054 IMPORTANT: OpenVPN's default port
number is now 1194, based on an official port number assignment by IANA.
OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Mon Dec 22 16:04:24 2014 us=619139 NOTE: OpenVPN 2.1 requires
'--script-security 2' or higher to call user-defined scripts or executables
Mon Dec 22 16:04:24 2014 us=621904 Diffie-Hellman initialized with 1024
bit key
Mon Dec 22 16:04:24 2014 us=622538 Control Channel MTU parms [ L:1541
D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Dec 22 16:04:24 2014 us=622565 Socket Buffers: R=[133120->131072]
S=[133120->131072]
Mon Dec 22 16:04:24 2014 us=622844 TUN/TAP device tun1 opened
Mon Dec 22 16:04:24 2014 us=622859 TUN/TAP TX queue length set to 100
Mon Dec 22 16:04:24 2014 us=622872 do_ifconfig, tt->ipv6=0,
tt->did_ifconfig_ipv6_setup=0
Mon Dec 22 16:04:24 2014 us=622889 /sbin/ifconfig tun1 10.9.8.1
pointopoint 10.9.8.2 mtu 1500
Mon Dec 22 16:04:24 2014 us=629062 Data Channel MTU parms [ L:1541
D:1450 EF:41 EB:4 ET:0 EL:0 ]
Mon Dec 22 16:04:24 2014 us=629108 Local Options String: 'V4,dev-type
tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,ifconfig 10.9.8.2
10.9.8.1,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Dec 22 16:04:24 2014 us=629116 Expected Remote Options String:
'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,ifconfig
10.9.8.1 10.9.8.2,cipher BF-CBC,auth SHA1,keysize 128,key-method
2,tls-client'
Mon Dec 22 16:04:24 2014 us=629140 Local Options hash (VER=V4): '5fe5783e'
Mon Dec 22 16:04:24 2014 us=629149 Expected Remote Options hash
(VER=V4): '4d600ab0'
Mon Dec 22 16:04:24 2014 us=629164 UDPv4 link local (bound): [undef]
Mon Dec 22 16:04:24 2014 us=629171 UDPv4 link remote: [undef]
------------------------------------------------------
And lsof :
# lsof -i udp:1194
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
openvpn 3389 root 3u IPv4 2927728573 0t0 UDP *:openvpn
Netcat can connect with port 1194.
iptables is not running.
------------------------------------------------------
# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
------------------------------------------------------
However no client can connect. I don't see them attempting in the log files.
The clients config follows ( test.test.co.uk is not replaced with
correct name),
------------------------------------------------------
client
dev tun
port 1194
proto udp
remote test.test.co.uk 1194 # VPN server IP : PORT
nobind
ca "C:\Program Files\OpenVPN\config\ca.crt"
cert "C:\Program Files\OpenVPN\config\clientname.crt"
key "C:\Program Files\OpenVPN\config\clientname.key"
comp-lzo
persist-key
persist-tun
verb 9
------------------------------------------------------
------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
