Fullmana_Alchemist
All,
I'm happy with this product, and I've got a few issues that I'm hoping I can get some help on to make this an even better product for me to use in my business.
This morning I was porting over a client to the VPN tunnel, but one of their machines was stuck on an IP from the general VPN dhcp pool instead of the pool I specified for the group that the client was assigned to. Normally when I see this, I usually go into the DHCP server, release the binding for that client, and force to reacquire a new lease, but I couldn't find anywhere on OpenVPN AS that would let me do that, and googling a few answers didn't help because it seems like the DHCP server is different than most of them out there. I corrected this issue by deleting the user that was having the trouble and adding a new one to replace it. How can I avoid this in the future?
I noticed that the timestamps on my logs were wrong, and after investigating I discovered that the system clock was wrong. I had to manually set this using the date command, because there's no NTP functionality built into AS (so it seems), and a run of 'sudo apt-get install ntpd' failed from the root login. Is there NTP functionality built into AS, and if so, how can I use it or how can I get NTP functionality on it?
My last question is born of my own stupidity I think, but maybe there's a way that I can fix this. I'm noticing that the self-signed cert that OpenVPN is giving out is a generic 'openvpn, inc.' certificate. I know that I need to regenerate the cert, but how can I do this without breaking any of my current configs or client settings? As well, I tried installing the cert on a few client machines, but they still show as a bad certificate when clients browse to my vpn page. Is there a way to install them and not have them come up as a bad certificate?
Any help anyone could offer on this I'd appreciate it.
Mimiko
In order to release the IP, just restart OpenVPN AS service or server.
As OpenVPN AS is installed as a guest OS on vmware or cloud, the time is synced by host os. Otherwise, you have to get an ntpd client from optware repository.
If you want to use your own root certificate for server, you will have to tamper with server files, and of course recreate all certificates for clients again.
