[Resolved] OpenPVN GUI stopped working on Windows 8

dannymx

So I was using the same config on Windows 7 until I changed to Windows 8 and was working fine for a few days and suddenly stopped working (I know the thing about running as administrator).

So here's my server config:

port 1194
proto udp
dev tun
ca /etc/openvpn/ca/keys/ca.crt
cert /etc/openvpn/ca/keys/server.crt
key /etc/openvpn/ca/keys/server.key  # This file should be kept secret
dh /etc/openvpn/ca/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
comp-lzo
max-clients 10
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3

And my client config:

client
dev tun
proto udp
remote 209.141.**.*** 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
comp-lzo
verb 3

And the log from the GUI window:

Tue Oct 01 21:42:29 2013 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Tue Oct 01 21:42:29 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Oct 01 21:42:29 2013 Need hold release from management interface, waiting...
Tue Oct 01 21:42:30 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Oct 01 21:42:30 2013 MANAGEMENT: CMD 'state on'
Tue Oct 01 21:42:30 2013 MANAGEMENT: CMD 'log all on'
Tue Oct 01 21:42:30 2013 MANAGEMENT: CMD 'hold off'
Tue Oct 01 21:42:30 2013 MANAGEMENT: CMD 'hold release'
Tue Oct 01 21:42:30 2013 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Oct 01 21:42:30 2013 UDPv4 link local: [undef]
Tue Oct 01 21:42:30 2013 UDPv4 link remote: [AF_INET]209.141.**.***:1194
Tue Oct 01 21:42:30 2013 MANAGEMENT: >STATE:1380681750,WAIT,,,
Tue Oct 01 21:42:30 2013 MANAGEMENT: >STATE:1380681750,AUTH,,,
Tue Oct 01 21:42:30 2013 TLS: Initial packet from [AF_INET]209.141.**.***:1194, sid=364ec240 bd98f44d
Tue Oct 01 21:42:31 2013 VERIFY OK: depth=1, C=US, ST=CA, L=San Francisco, O=None, CN=None CA, emailAddress=me@****.***
Tue Oct 01 21:42:31 2013 VERIFY OK: nsCertType=SERVER
Tue Oct 01 21:42:31 2013 VERIFY OK: depth=0, C=US, ST=CA, L=San Francisco, O=None, CN=server, emailAddress=me@****.***
Tue Oct 01 21:42:32 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Oct 01 21:42:32 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 01 21:42:32 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Oct 01 21:42:32 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 01 21:42:32 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Oct 01 21:42:32 2013 [server] Peer Connection Initiated with [AF_INET]209.141.**.***:1194
Tue Oct 01 21:42:33 2013 MANAGEMENT: >STATE:1380681753,GET_CONFIG,,,
Tue Oct 01 21:42:34 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Oct 01 21:42:34 2013 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.10 10.8.0.9'
Tue Oct 01 21:42:34 2013 OPTIONS IMPORT: timers and/or timeouts modified
Tue Oct 01 21:42:34 2013 OPTIONS IMPORT: --ifconfig/up options modified
Tue Oct 01 21:42:34 2013 OPTIONS IMPORT: route options modified
Tue Oct 01 21:42:34 2013 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Oct 01 21:42:34 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Oct 01 21:42:34 2013 MANAGEMENT: >STATE:1380681754,ASSIGN_IP,,10.8.0.10,
Tue Oct 01 21:42:34 2013 open_tun, tt->ipv6=0
Tue Oct 01 21:42:34 2013 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{CB8A2FB4-58FF-4823-8951-44BBA2E02C7C}.tap
Tue Oct 01 21:42:34 2013 TAP-Windows Driver Version 9.9 
Tue Oct 01 21:42:34 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.10/255.255.255.252 on interface {CB8A2FB4-58FF-4823-8951-44BBA2E02C7C} [DHCP-serv: 10.8.0.9, lease-time: 31536000]
Tue Oct 01 21:42:34 2013 Successful ARP Flush on interface [19] {CB8A2FB4-58FF-4823-8951-44BBA2E02C7C}
Tue Oct 01 21:42:39 2013 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Tue Oct 01 21:42:39 2013 C:\Windows\system32\route.exe ADD 209.141.**.*** MASK 255.255.255.255 192.168.1.1
Tue Oct 01 21:42:39 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Tue Oct 01 21:42:39 2013 Route addition via IPAPI succeeded [adaptive]
Tue Oct 01 21:42:39 2013 C:\Windows\system32\route.exe ADD 192.168.1.1 MASK 255.255.255.255 192.168.1.1 IF 12
Tue Oct 01 21:42:39 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Tue Oct 01 21:42:39 2013 Route addition via IPAPI succeeded [adaptive]
Tue Oct 01 21:42:39 2013 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.9
Tue Oct 01 21:42:39 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Tue Oct 01 21:42:39 2013 Route addition via IPAPI succeeded [adaptive]
Tue Oct 01 21:42:39 2013 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.9
Tue Oct 01 21:42:39 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Tue Oct 01 21:42:39 2013 Route addition via IPAPI succeeded [adaptive]
Tue Oct 01 21:42:39 2013 MANAGEMENT: >STATE:1380681759,ADD_ROUTES,,,
Tue Oct 01 21:42:39 2013 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.9
Tue Oct 01 21:42:39 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Tue Oct 01 21:42:39 2013 Route addition via IPAPI succeeded [adaptive]
Tue Oct 01 21:42:39 2013 Initialization Sequence Completed
Tue Oct 01 21:42:39 2013 MANAGEMENT: >STATE:1380681759,CONNECTED,SUCCESS,10.8.0.10,209.141.**.***

It looks like it connects but I don't get Internet access, and I can't ping anything inside or outside the VPN.

Any idea what could be wrong? I also allowed the application through the windows firewall.

Here is the iptables, I'm not sure they have anything to do with this, I've been working with this config for a long time but I'll paste them here anyway:

*mangle
:PREROUTING ACCEPT [203235:266615777]
:INPUT ACCEPT [200156:266430422]
:FORWARD ACCEPT [3079:185355]
:OUTPUT ACCEPT [106017:13404248]
:POSTROUTING ACCEPT [106017:13404248]
COMMIT
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -d 127.0.0.0/8 ! -i lo -j REJECT --reject-with icmp-port-unreachable
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 21 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 1090:1100 -j ACCEPT
-A INPUT -p udp -m udp --dport 1194 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 9000 -j ACCEPT
-A INPUT -p udp -m udp --dport 17858 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 17858 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 9090 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-port-unreachable
-A OUTPUT -j ACCEPT
COMMIT
*nat
:PREROUTING ACCEPT [3213:204578]
:POSTROUTING ACCEPT [763:47422]
:OUTPUT ACCEPT [763:47422]
-A POSTROUTING -s 10.8.0.0/24 -j SNAT --to-source 209.141.**.***
COMMIT

I removed parts of some IPs for obvious reasons.

dannymx

debbie10t wroteCould you add your client log please.
https://forums.openvpn.net/post33633.html

Did you copy ALL the files from the Win 7 pc to the Win 8 pc ?
Is the Win 7 pc still accessing the server as before ?
Did you make new keys for your Win 8 pc ?

This is weird but seems like in my old Windows 7 config I had the wireless adapter to never turn off to saver power, and on the new Windows 8 I had it on, I turned it off and so far seems like the problem was fixed.

What I did when I changed the operating system was only to copy my config folder and reinstall OpenVPN with the GUI, and other things related to 8, like the administrator thing, etc.

I'll report back if this stops working again.

Thanks.