MatejKovacic wroteport 443
proto tcp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/Server.crt
key /etc/openvpn/keys/Server.key
dh /etc/openvpn/keys/dh4096.pem
tls-auth /etc/openvpn/keys/ta.key 0
crl-verify /etc/openvpn/keys/crl.pem
server 10.10.5.0 255.255.255.0
persist-key
persist-tun
ifconfig-pool-persist /etc/openvpn/ipp.txt
topology subnet
push "topology subnet"
push "redirect-gateway def1"
push "dhcp-option DNS 10.10.5.1"
persist-key
persist-tun
tun-mtu 1450
mtu-disc maybe
user nobody
group nogroup
client-config-dir /etc/openvpn/ccd
comp-lzo yes
push "comp-lzo yes"
keepalive 10 120
verb 4
status /var/log/openvpn/status.log
log /var/log/openvpn/openvpn.log
log-append /var/log/openvpn/openvpn.log
BTW, this config is working, but users with iPads cannot login. Log file says:
VERIFY OK: depth=0, /C=SI/ST=SI/L=***/O=***/CN=***/name=***/emailAddress=***
TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed
Fatal TLS error (check_tls_errors_co), restarting
SIGUSR1[soft,tls-error] received, client-instance restarting
TCP/UDP: Closing socket
I am getting this same problem when trying to connect with my iPad. I cannot figure it out or find the answer.
