Hello,
I am using the OpenVPN AS v1.8.4 and set up a profile for my OpenVPN enabled SIP Phone (Yealink VP530).
I used the guides on openvpn.net to generate the cert/keys and make an autologin profile.
I have read the documentation and think to have understood it well. The client configuration seems correct too. The client username is
sipphone.
But I keep getting this error in the Server logs and can't find any reference to it.
Can anyone please explain what I'm doing wrong ?
exception in AuthDelegateProplist: credential username must not be empty
The client doesn't allow login/password auth, therefore only certs are used.
Many thanks for your help
Configuration files :
[as.conf] (SERVER)
AS_CONNECT=true
tmp_dir=~/tmp
lic.dir=~/licenses
run_start_retry.give_up=60
run_start_retry.resample=10
sa.show_c2s_routes=true
certs_db=sqlite:///~/db/certs.db
user_prop_db=sqlite:///~/db/userprop.db
config_db=sqlite:///~/db/config.db
log_db=sqlite:///~/db/log.db
db_retry.interval=1
db_retry.n_attempts=6
boot_pam_service=openvpnas
boot_pam_users.0=openvpn
system_users_local.0=root
system_users_local.1=openvpn_as
cs.user=openvpn_as
cs.group=openvpn_as
general.sock_dir=~/sock
sa.win_exe_dir=~/exe
sa.company_name=OpenVPN Technologies, Inc.
sa.sock=~/sock/sagent
cs.auto_generate=true
cs.ca_bundle=~/web-ssl/ca.crt
cs.priv_key=~/web-ssl/server.key
cs.cert=~/web-ssl/server.crt
cs.dynamic_port_base=870
sa.initial_run_groups.0=web_group
sa.reactor=epoll
sa.unit=0
iptables.web=true
vpn.server.user=openvpn_as
vpn.server.group=openvpn_as
[confdba -us] (output)
{
"__DEFAULT__": {
"def_deny": "false",
"prop_autogenerate": "true",
"type": "user_default"
},
"openvpn": {
"prop_superuser": "true",
"type": "user_compile"
},
"sipphone": {
"access_from.0": "+ALL_S2C_SUBNETS",
"access_from.1": "+ALL_VPN_CLIENTS",
"prop_autologin": "true",
"type": "user_compile"
}
}
[vpn.cnf] (CLIENT)
client
dev tun
dev-type tun
proto tcp
remote %SERVER_IP% 445
resolv-retry infinite
nobind
persist-key
persist-tun
ca /config/openvpn/keys/ca.crt
cert /config/openvpn/keys/client1.crt
key /config/openvpn/keys/client1.key
ns-cert-type server
tls-auth /config/openvpn/keys/ta.key 1
comp-lzo
verb 3
