Re: [Openvpn-users] reneg-sec problem when using a token for client certificates

2014-12-19 Thread Jan Just Keijser
Hi, On 16/12/14 11:34, egabr_2...@yahoo.it wrote: > Hi, > > I'm trying to configure an openvpn client on Linux to use certificates stored > on a sc-hsm usb token; everything seemed to work fine, but then I noticed a > blocking problem when the reneg-sec period expires. > When the token PIN is in

Re: [Openvpn-users] reneg-sec problem when using a token for client certificates

2014-12-16 Thread Mathias Jeschke
Hi EG, Okay. I would try to run the openvpn client with strace to see what resource it tries to get (and fails): $ strace -o /tmp/openvpn-stace.log -f openvpn client-udp.conf and afterwards investigate the logfile, which will contain all the system calls. Cheers, Mathias. Am 16.12.14 um 12:

Re: [Openvpn-users] reneg-sec problem when using a token for client certificates

2014-12-16 Thread Mathias Jeschke
Hi, Sounds like a permission issue to me, due to: > user user > group user in your client.conf Have you checked that "user" can access the pcscd socket? What happens if you run the openvpn client with root permission? (remove the user/group options from the client conf) Cheers, Mathias. -

[Openvpn-users] reneg-sec problem when using a token for client certificates

2014-12-16 Thread egabr_2014
Hi, I'm trying to configure an openvpn client on Linux to use certificates stored on a sc-hsm usb token; everything seemed to work fine, but then I noticed a blocking problem when the reneg-sec period expires. When the token PIN is inserted for the first time, the initialization of the vpn is s