Hi all,
my server is raspbian
my client is windows 7
i have no problem in connecting without proxy. I cannot connect to vpn from work, they are using a Forefront TMG HTTP Proxy.
Server configuration:
port 443
proto tcp
dev tap
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh1024.pem
tls-auth /etc/openvpn/ta.key 0
server 192.168.100.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
verb 3
Client configuration:
client
dev tap
--proto tcp-client
remote x.x.x.x 443
pull
resolv-retry infinite
nobind
persist-key
persist-tun
script-security 3
--tls-client
--ca ca.crt
--cert notebook.crt
--key notebook.key
--tls-auth ta.key 1
cipher AES-128-CBC
comp-lzo
verb 3
redirect-gateway def1
--tls-timeout 120
--http-proxy y.y.y.y 80 credentials.txt ntlm
--http-proxy-option VERSION 1.1
--http-proxy-option AGENT Mozilla/5.0+(Windows;+U;+Windows+NT+5.0;+en-GB;+rv:1.7.6)+Gecko/20050226+Firefox/1.0.1
Client logfile:
Thu May 09 13:48:24 2013 OpenVPN 2.3.1 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Mar 28 2013
Enter Management Password:
Thu May 09 13:48:24 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu May 09 13:48:24 2013 Need hold release from management interface, waiting...
Thu May 09 13:48:24 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu May 09 13:48:24 2013 MANAGEMENT: CMD 'state on'
Thu May 09 13:48:24 2013 MANAGEMENT: CMD 'log all on'
Thu May 09 13:48:24 2013 MANAGEMENT: CMD 'hold off'
Thu May 09 13:48:24 2013 MANAGEMENT: CMD 'hold release'
Thu May 09 13:48:24 2013 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Thu May 09 13:48:24 2013 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Thu May 09 13:48:25 2013 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Thu May 09 13:48:25 2013 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu May 09 13:48:25 2013 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu May 09 13:48:25 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu May 09 13:48:25 2013 MANAGEMENT: >STATE:1368100105,RESOLVE,,,
Thu May 09 13:48:25 2013 Attempting to establish TCP connection with [AF_INET]10.1.26.130:80
Thu May 09 13:48:25 2013 MANAGEMENT: >STATE:1368100105,TCP_CONNECT,,,
Thu May 09 13:48:25 2013 TCP connection established with [AF_INET]10.1.26.130:80
Thu May 09 13:48:25 2013 Send to HTTP proxy: 'CONNECT x.x.x.x:443 HTTP/1.1'
Thu May 09 13:48:25 2013 Attempting NTLM Proxy-Authorization phase 1
Thu May 09 13:48:26 2013 HTTP proxy returned: 'HTTP/1.1 407 Proxy Authentication Required ( Access is denied. )'
Thu May 09 13:48:26 2013 Proxy requires authentication
Thu May 09 13:48:26 2013 HTTP proxy returned: 'Via: 1.1 PROXYSERVER'
Thu May 09 13:48:26 2013 HTTP proxy returned: 'Proxy-Authenticate: NTLM TlRMTVNTUAACAAAAAwADADgAAAAGAoECANNx1GPDwr8AAAAAAAAAAIYAhgA7AAAABgByFwAAAA9ETVoCAAYARABNAFoAAQASAFAAUgBJAEwAVABNAEcAMAAxAAQAEgBkAG0AegAuAGkAbgBhAGkAbAADACYAUABSAEkATABUAE0ARwAwADEALgBkAG0AegAuAGkAbgBhAGkAbAAFABIAZABtAHoALgBpAG4AYQBpAGwABwAIAP0G8x6rTM4BAAAAAA=='
Thu May 09 13:48:26 2013 auth string: 'TlRMTVNTUAACAAAAAwADADgAAAAGAoECANNx1GPDwr8AAAAAAAAAAIYAhgA7AAAABgByFwAAAA9ETVoCAAYARABNAFoAAQASAFAAUgBJAEwAVABNAEcAMAAxAAQAEgBk'
Thu May 09 13:48:26 2013 Received NTLM Proxy-Authorization phase 2 response
Thu May 09 13:48:28 2013 recv_line: TCP port read timeout expired
Thu May 09 13:48:28 2013 Send to HTTP proxy: 'CONNECT x.x.x.x:443 HTTP/1.1'
Thu May 09 13:48:28 2013 Send to HTTP proxy: 'Host: x.x.x.x'
Thu May 09 13:48:28 2013 Attempting NTLM Proxy-Authorization phase 3
Thu May 09 13:48:28 2013 Send to HTTP proxy: 'Proxy-Authorization: NTLM TlRMTVNTUAADAAAAAAAAAHQAAAAYABgAQAAAAAAAAAB0AAAAHAAcAFgAAAAAAAAAdAAAAAAAAAB0AAAAAgIAADUZcte5/57J+ZXjyZfSrMCQbhOjX2QbgXlocDEyMkBpbmFpbHV0ZW50aS5pbmFpbC5wcmk='
Thu May 09 13:48:33 2013 recv_line: TCP port read timeout expired
Thu May 09 13:48:33 2013 SIGTERM[soft,init_instance] received, process exiting
Thu May 09 13:48:33 2013 MANAGEMENT: >STATE:1368100113,EXITING,init_instance,,
Any help will be appreciated.
Thank you
