Re: [Openvpn-users] ssh over OpenVPN incredibly stable

2014-12-16 Thread Les Mikesell
On Tue, Dec 16, 2014 at 9:26 PM, Daniel Miller wrote: > Slightly off-topic - but... > > I've noticed that my "normal" or direct ssh connections from my home > (Windoze) to my office (Linux) can be subject to instability - > particularly if I simply leave PuTTY connected and idle for a while at > s

[Openvpn-users] Fw: ssh over OpenVPN incredibly stable

2014-12-16 Thread debbie10t
- Original Message - From: To: "Daniel Miller" Sent: Wednesday, December 17, 2014 3:34 AM Subject: Re: [Openvpn-users] ssh over OpenVPN incredibly stable > Perhaps SSH is providing you with hitherto unforeseen security. > > - Original Message - > From: "Daniel Miller" > To:

[Openvpn-users] ssh over OpenVPN incredibly stable

2014-12-16 Thread Daniel Miller
Slightly off-topic - but... I've noticed that my "normal" or direct ssh connections from my home (Windoze) to my office (Linux) can be subject to instability - particularly if I simply leave PuTTY connected and idle for a while at some point it will get disconnected. However...if I activate my

Re: [Openvpn-users] reneg-sec problem when using a token for client certificates

2014-12-16 Thread Mathias Jeschke
Hi EG, Okay. I would try to run the openvpn client with strace to see what resource it tries to get (and fails): $ strace -o /tmp/openvpn-stace.log -f openvpn client-udp.conf and afterwards investigate the logfile, which will contain all the system calls. Cheers, Mathias. Am 16.12.14 um 12:

Re: [Openvpn-users] reneg-sec problem when using a token for client certificates

2014-12-16 Thread Mathias Jeschke
Hi, Sounds like a permission issue to me, due to: > user user > group user in your client.conf Have you checked that "user" can access the pcscd socket? What happens if you run the openvpn client with root permission? (remove the user/group options from the client conf) Cheers, Mathias. -

[Openvpn-users] reneg-sec problem when using a token for client certificates

2014-12-16 Thread egabr_2014
Hi, I'm trying to configure an openvpn client on Linux to use certificates stored on a sc-hsm usb token; everything seemed to work fine, but then I noticed a blocking problem when the reneg-sec period expires. When the token PIN is inserted for the first time, the initialization of the vpn is s