RE: OpenVPN Client on Ubuntu
- From: "MrDetermination" <mrd mrdetermination com>
- To: <dalbers gmail com>
- Cc: networkmanager-list gnome org
- Subject: RE: OpenVPN Client on Ubuntu
- Date: Mon, 3 Dec 2007 16:01:23 -0600
The server is on DD-WRT and configured as directed here:
http://www.dd-wrt.com/wiki/index.php/OpenVPN
With the following in my startup commands:
cd /tmp
openvpn --mktun --dev tap0
brctl addif br0 tap0
ifconfig tap0 0.0.0.0 promisc up
echo "
# Tunnel options
mode server # Set OpenVPN major mode
proto udp # Setup the protocol (server)
port xxxx # TCP/UDP port number
dev tap0 # TUN/TAP virtual network device
keepalive 15 60 # Simplify the expression of --ping
daemon # Become a daemon after all initialization
verb 3 # Set output verbosity to n
comp-lzo # Use fast LZO compression
# OpenVPN server mode options
client-to-client # tells OpenVPN to internally route client-to-client
traffic
duplicate-cn # Allow multiple clients with the same common name
# TLS Mode Options
tls-server # Enable TLS and assume server role during TLS handshake
ca ca.crt # Certificate authority (CA) file
dh dh1024.pem # File containing Diffie Hellman parameters
cert server.crt # Local peer's signed certificate
key server.key # Local peer's private key
" > openvpn.conf
echo "
-----BEGIN CERTIFICATE-----
RANDOM GARBAGE
-----END CERTIFICATE-----
" > ca.crt
echo "
-----BEGIN RSA PRIVATE KEY-----
RANDOM GARBAGE
-----END RSA PRIVATE KEY-----
" > server.key
chmod 600 server.key
echo "
-----BEGIN CERTIFICATE-----
RANDOM GARBAGE
-----END CERTIFICATE-----
" > server.crt
echo "
-----BEGIN DH PARAMETERS-----
RANDOM GARBAGE
-----END DH PARAMETERS-----
" > dh1024.pem
sleep 5
ln -s /usr/sbin/openvpn /tmp/myvpn
/tmp/myvpn --config openvpn.conf
-----Original Message-----
From: Darren Albers [mailto:dalbers gmail com]
Sent: Monday, December 03, 2007 3:11 PM
To: mrd mrdetermination com
Cc: networkmanager-list gnome org
Subject: Re: OpenVPN Client on Ubuntu
On Mon, 2007-12-03 at 14:37 -0600, MrDetermination wrote:
> Post here if you prefer web boards (identical content):
>
> http://ubuntuforums.org/showthread.php?t=630353
>
>
>
> Novice Linux guy here...
>
>
>
> I have an OpenVPN server running on DD-WRT. The Windows OpenVPN GUI
> connects to it just fine with the following config:
>
>
>
> client
>
> dev tap
>
> proto udp
>
> remote my.dynamic-ip.org 9876
>
> resolv-retry infinite
>
> nobind
>
> persist-key
>
> persist-tun
>
> ca ca.crt
>
> cert laptop.crt
>
> key laptop.key
>
> ns-cert-type server
>
> comp-lzo
>
> verb 3
>
> route-gateway 192.168.0.1
>
> redirect-gateway
>
>
>
> The VPN login failed because the VPN program received an invalid
> configuration from the VPN server.[/quote]
>
>
>
> I've tried x.509 with and without password authentication as the auth
> type. When I created the cert/key pairs I created a "challenge" pw I
> am not required to use to connect with from Windows. When I try to
> connect with the "with password" connection type I am asked for a
> password and certificate password. I have tried both connection types
> with every possible combination of passwords but had no luck.
>
>
>
> The best case scenario always results in the following:
>
>
>
> "Could not start the VPN connection 'Home' because the VPN server did
> not return an adequate network configuration."
>
>
>
> I have tried the GUI config manually and via importing a manual
> config. The paths to the certificates is absolutely correct.
>
>
>
> I'd appreciate any help,
>
> Chip
Can you send your server.conf to the list? Make sure you remove
anything confidential.
[
Date Prev][
Date Next] [
Thread Prev][
Thread Next]
[
Thread Index]
[
Date Index]
[
Author Index]