Hi,
I've created an Amazon EC2 Windows Server 2012 instance and installed and configured OpenVPN server on it.
I couldn't find the build-key scripts in this latest release so I build the server and client keys on my home computer and copied them to the server. I didn't copy all files, just the ones referenced in the server.ovpn file.
I have set up many OpenVPN servers and clients in the past.
With this one I used the example server.ovpn file, but changed to tcp (I haven't tried for a long time, but never managed to get udp working).
I set up an inbound rule in Windows Firewall and a Security Group in the AWS console allowing 1194 inbound.
I cannot get a connection. The client times out.
The Server Config is:
port 1194
proto tcp
dev tun
ca keys/ca.crt
cert keys/sportsev.crt
key keys/sportsev.key
dh keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
management localhost 7505
verb 3
The log I get is:
Thu Dec 12 21:29:15 2013 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Thu Dec 12 21:29:15 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Dec 12 21:29:15 2013 Need hold release from management interface, waiting...
Thu Dec 12 21:29:15 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Dec 12 21:29:15 2013 MANAGEMENT: CMD 'state on'
Thu Dec 12 21:29:15 2013 MANAGEMENT: CMD 'log all on'
Thu Dec 12 21:29:15 2013 MANAGEMENT: CMD 'hold off'
Thu Dec 12 21:29:15 2013 MANAGEMENT: CMD 'hold release'
Thu Dec 12 21:29:15 2013 Diffie-Hellman initialized with 1024 bit key
Thu Dec 12 21:29:15 2013 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Dec 12 21:29:15 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Dec 12 21:29:15 2013 MANAGEMENT: >STATE:1386851355,ASSIGN_IP,,10.8.0.1,
Thu Dec 12 21:29:15 2013 open_tun, tt->ipv6=0
Thu Dec 12 21:29:15 2013 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{3CA5FC30-EB1F-46A0-B4D2-D6C437233C7E}.tap
Thu Dec 12 21:29:15 2013 TAP-Windows Driver Version 9.9
Thu Dec 12 21:29:15 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {3CA5FC30-EB1F-46A0-B4D2-D6C437233C7E} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Thu Dec 12 21:29:15 2013 Sleeping for 10 seconds...
Thu Dec 12 21:29:25 2013 Successful ARP Flush on interface [21] {3CA5FC30-EB1F-46A0-B4D2-D6C437233C7E}
Thu Dec 12 21:29:25 2013 MANAGEMENT: >STATE:1386851365,ADD_ROUTES,,,
Thu Dec 12 21:29:25 2013 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Thu Dec 12 21:29:25 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Dec 12 21:29:25 2013 Route addition via IPAPI succeeded [adaptive]
Thu Dec 12 21:29:25 2013 Listening for incoming TCP connection on [undef]
Thu Dec 12 21:29:25 2013 TCPv4_SERVER link local (bound): [undef]
Thu Dec 12 21:29:25 2013 TCPv4_SERVER link remote: [undef]
Thu Dec 12 21:29:25 2013 MULTI: multi_init called, r=256 v=256
Thu Dec 12 21:29:25 2013 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Thu Dec 12 21:29:25 2013 IFCONFIG POOL LIST
Thu Dec 12 21:29:25 2013 MULTI: TCP INIT maxclients=60 maxevents=64
Thu Dec 12 21:29:25 2013 Initialization Sequence Completed
Thu Dec 12 21:29:25 2013 MANAGEMENT: >STATE:1386851365,CONNECTED,SUCCESS,10.8.0.1,
Does anyone have any suggestions of what might be wrong with this setup?
By the way, telnetting to the management port does not work. It does with all my other installations.
