Hi,
i have a problem with my openvpn server installed on Debian 7.
My server.conf :
# Serveur TCP/443
mode server
local 192.168.12.1
proto tcp-server
port 443
dev tun
tls-server
# Mode PAM pour authentification
plugin /etc/openvpn/openvpn-auth-pam.so common-auth
username-as-common-name
auth-user-pass-verify auth-pam.pl via-file
tmp-dir "/etc/openvpn/tmp"
# Cles et certificats
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh1024.pem
tls-auth /etc/openvpn/ta.key 0
# Network
ifconfig 192.168.232.1 255.255.255.0
server 192.168.232.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 192.168.1.4"
push "dhcp-option DNS 192.168.1.10"
keepalive 10 120
# Client config directory
ifconfig-pool-persist /etc/openvpn/ipp.txt
# Securite
script-security 2
user nobody
group nogroup
chroot /etc/openvpn/jail
persist-key
persist-tun
comp-lzo
# Log
verb 3
mute 20
status openvpn-status.log
log-append /var/log/openvpn.log
My client.conf :
# Client
client
dev tun
proto tcp-client
remote XX.XX.XX.XX 443
resolv-retry infinite
# key
ca ca.crt
cert jfremond.crt
key jfremond.key
tls-auth ta.key 1
# Securite
auth-user-pass
nobind
persist-key
persist-tun
comp-lzo
verb 3
and my probl is :
OpenVPN 2.2.1 i486-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 19 2013
Thu Oct 3 11:21:16 2013 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Thu Oct 3 11:21:16 2013 Diffie-Hellman initialized with 1024 bit key
Thu Oct 3 11:21:16 2013 Control Channel Authentication: using '/etc/openvpn/ta.key' as a OpenVPN static key file
Thu Oct 3 11:21:16 2013 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Oct 3 11:21:16 2013 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Oct 3 11:21:16 2013 TLS-Auth MTU parms [ L:1544 D:168 EF:68 EB:0 ET:0 EL:0 ]
Thu Oct 3 11:21:16 2013 Socket Buffers: R=[87380->131072] S=[16384->131072]
Thu Oct 3 11:21:16 2013 ROUTE default_gateway=192.168.12.254
Thu Oct 3 11:21:16 2013 TUN/TAP device tun0 opened
Thu Oct 3 11:21:16 2013 TUN/TAP TX queue length set to 100
Thu Oct 3 11:21:16 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Oct 3 11:21:16 2013 /sbin/ifconfig tun0 192.168.232.1 pointopoint 192.168.232.2 mtu 1500
Thu Oct 3 11:21:16 2013 /sbin/route add -net 192.168.232.0 netmask 255.255.255.0 gw 192.168.232.2
Thu Oct 3 11:21:16 2013 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Oct 3 09:21:16 2013 chroot to '/etc/openvpn/jail' and cd to '/' succeeded
Thu Oct 3 09:21:16 2013 GID set to nogroup
Thu Oct 3 09:21:16 2013 UID set to nobody
Thu Oct 3 09:21:16 2013 Listening for incoming TCP connection on [AF_INET]192.168.12.1:443
Thu Oct 3 09:21:16 2013 TCPv4_SERVER link local (bound): [AF_INET]192.168.12.1:443
Thu Oct 3 09:21:16 2013 TCPv4_SERVER link remote: [undef]
Thu Oct 3 09:21:16 2013 MULTI: multi_init called, r=256 v=256
Thu Oct 3 09:21:16 2013 IFCONFIG POOL: base=192.168.232.4 size=62, ipv6=0
Thu Oct 3 09:21:16 2013 ifconfig_pool_read(), in='user1,192.168.232.8', TODO: IPv6
Thu Oct 3 09:21:16 2013 succeeded -> ifconfig_pool_set()
Thu Oct 3 09:21:16 2013 ifconfig_pool_read(), in='user2,192.168.232.12', TODO: IPv6
Thu Oct 3 09:21:16 2013 succeeded -> ifconfig_pool_set()
Thu Oct 3 09:21:16 2013 IFCONFIG POOL LIST
Thu Oct 3 09:21:16 2013 user1,192.168.232.8
Thu Oct 3 09:21:16 2013 user2,192.168.232.12
Thu Oct 3 09:21:16 2013 MULTI: TCP INIT maxclients=1024 maxevents=1028
Thu Oct 3 09:21:16 2013 Initialization Sequence Completed
Thu Oct 3 09:29:53 2013 MULTI: multi_create_instance called
Thu Oct 3 09:29:53 2013 Re-using SSL/TLS context
Thu Oct 3 09:29:53 2013 LZO compression initialized
Thu Oct 3 09:29:53 2013 Control Channel MTU parms [ L:1544 D:168 EF:68 EB:0 ET:0 EL:0 ]
Thu Oct 3 09:29:53 2013 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Oct 3 09:29:53 2013 Local Options hash (VER=V4): 'bd577cd1'
Thu Oct 3 09:29:53 2013 Expected Remote Options hash (VER=V4): 'ee93268d'
Thu Oct 3 09:29:53 2013 TCP connection established with [AF_INET]92.90.26.108:45494
Thu Oct 3 09:29:53 2013 TCPv4_SERVER link local: [undef]
Thu Oct 3 09:29:53 2013 TCPv4_SERVER link remote: [AF_INET]92.90.26.108:45494
Thu Oct 3 09:29:53 2013 XX.XX.XX.XX:45494 TLS: Initial packet from [AF_INET]XX.XX.XX.XX:45494, sid=194f7d41 be4ee590
Thu Oct 3 09:30:04 2013 XX.XX.XX.XX:45494 VERIFY OK: depth=1, /C=FR/ST=XX/L=city/O=entreprise/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
Thu Oct 3 09:30:04 2013 92.90.26.108:45494 VERIFY OK: depth=0, /C=FR/ST=XX/L=city/O=entreprise/OU=changeme/CN=user2/name=changeme/emailAddress=mail@host.domain
Thu Oct 3 09:30:07 2013 92.90.26.108:45494 Could not create temporary file '/etc/openvpn/tmp/openvpn_up_1ab9c878fcc85a8f98ca86a2955c773c.tmp': No such file or directory
Thu Oct 3 09:30:07 2013 92.90.26.108:45494 Exiting
Thu Oct 3 09:30:07 2013 92.90.26.108:45494 /sbin/route del -net 192.168.232.0 netmask 255.255.255.0
Thu Oct 3 09:30:07 2013 92.90.26.108:45494 ERROR: Linux route delete command failed: could not execute external program
Thu Oct 3 09:30:07 2013 92.90.26.108:45494 Closing TUN/TAP interface
Thu Oct 3 09:30:07 2013 92.90.26.108:45494 /sbin/ifconfig tun0 0.0.0.0
Thu Oct 3 09:30:07 2013 92.90.26.108:45494 Linux ip addr del failed: could not execute external program
did some could help me please ??
thinks
