Re: [pfSense Support] openvpn TLS

2010-04-19 Thread Nick Upson
so far it's not working with tls,I've been concentrating on other areas but expect to return to this shortly On 17 April 2010 19:27, i...@unseregedanken.de i...@unseregedanken.de wrote: Nick, can you please give some feedback? jan i...@unseregedanken.de wrote: Hi Nick, Nick Upson wrote:

Re: [pfSense Support] openvpn TLS

2010-04-19 Thread i...@unseregedanken.de
okay, just let us know when your focus changes. Nick Upson wrote: so far it's not working with tls,I've been concentrating on other areas but expect to return to this shortly On 17 April 2010 19:27, i...@unseregedanken.de i...@unseregedanken.de wrote: Nick, can you please give some

Re: [pfSense Support] openvpn TLS

2010-04-19 Thread Nick Upson
right, I took a working openvpn tunnel, added tls-auth /var/etc/openvpn_server0.tls to the server (pfsense) and enabled tls-auth in the client. then made the client reconnect, the file is the same one copied to both machines. I just get TLS error: TLS key negociation failed to occur within 60

Re: [pfSense Support] openvpn TLS

2010-04-19 Thread i...@unseregedanken.de
you will have to add the side identication integer to the string of the tls-auth directive. for the server sided configuration use .. tls-auth /var/etc/openvpn_server0.tls 0 ^ and for the client .. tls-auth

Re: [pfSense Support] openvpn TLS

2010-04-19 Thread Nick Upson
On 19 April 2010 13:20, i...@unseregedanken.de i...@unseregedanken.de wrote: you will have to add the side identication integer to the string of the tls-auth directive. for the server sided configuration use ..        tls-auth /var/etc/openvpn_server0.tls 0                                  

Re: [pfSense Support] openvpn TLS

2010-04-19 Thread i...@unseregedanken.de
can you try to regenerate the tls key file on your pfsense box and then copy it to your clients? afaik your current key has not been generated on your pfsense box, right? maybe thats why it says that there is not enough key material to proceed .. pfbox # openvpn --genkey --secret

Re: [pfSense Support] openvpn TLS

2010-04-19 Thread Nick Upson
I can try that out but the permanent solution needs to use the existing tls key, as it's also used, without problems, elsewhere and we don't want the headache of more key files than necessary On 19 April 2010 14:36, i...@unseregedanken.de i...@unseregedanken.de wrote: can you try to regenerate

Re: [pfSense Support] openvpn TLS

2010-04-19 Thread i...@unseregedanken.de
Nick Upson wrote: I can try that out but the permanent solution needs to use the existing tls key, as it's also used, without problems, elsewhere and we don't want the headache of more key files than necessary So you're already using the respective key with other openvpn instances? can you

Re: [pfSense Support] openvpn TLS

2010-04-19 Thread Nick Upson
yes, the ta key works fine against an openvpn server on fedora over wlan which part of the configs do you need? On 19 April 2010 14:46, i...@unseregedanken.de i...@unseregedanken.de wrote: Nick Upson wrote: I can try that out but the permanent solution needs to use the existing tls key, as

Re: [pfSense Support] openvpn TLS

2010-04-19 Thread info
On 04/19/2010 03:54 PM Nick Upson wrote: yes, the ta key works fine against an openvpn server on fedora over wlan which part of the configs do you need? would be great to have a look on both; the client and the server config.