Hello I have a Debian server, which has OpenVPN installed. In the folder /etc/openvpn is the static.key and the server.conf. server.conf: [code]dev tun ifconfig 10.8.0.1 10.8.0.2 secret static.key [/code] On my client is the same static.key and a client.conf. client.conf: [code]remote myremote.domain dev tun ifconfig 10.8.0.2 10.8.0.1 secret static.key[/code] My client is a linux arch notebook. I can connect to the OpenVPN but i cant ping 10.8.0.1. The IP 10.8.0.2 is ping-able on the client. You have any idea whats going wrong? Inputs and tips are appreciated :) Regards jompsi

[Resolved] VPN PSK - TUN/TAP : Invalid argument (code=22)

jompsi

Hello

I have a Debian server, which has OpenVPN installed. In the folder /etc/openvpn is the static.key and the server.conf.
server.conf:

dev tun
ifconfig 10.8.0.1 10.8.0.2
secret static.key

On my client is the same static.key and a client.conf.
client.conf:

remote myremote.domain
dev tun
ifconfig 10.8.0.2 10.8.0.1
secret static.key

My client is a linux arch notebook. I can connect to the OpenVPN but i cant ping 10.8.0.1. The IP 10.8.0.2 is ping-able on the client.

You have any idea whats going wrong? Inputs and tips are appreciated 🙂

Regards
jompsi

jompsi

Hi

Thanks for your answer:

Here is the log from the server:

Feb 12 15:21:54 debian-js ovpn-static-server[5832]: Peer Connection Initiated with [AF_INET]192.168.1.42:48027
Feb 12 15:21:54 debian-js ovpn-static-server[5832]: write to TUN/TAP : Invalid argument (code=22)
Feb 12 15:21:55 debian-js ovpn-static-server[5832]: write to TUN/TAP : Invalid argument (code=22)
Feb 12 15:22:04 debian-js ovpn-static-server[5832]: write to TUN/TAP : Invalid argument (code=22)
Feb 12 15:22:13 debian-js ovpn-static-server[5832]: write to TUN/TAP : Invalid argument (code=22)
Feb 12 15:22:54 debian-js ovpn-static-server[5832]: write to TUN/TAP : Invalid argument (code=22)
Feb 12 15:22:54 debian-js ovpn-static-server[5832]: write to TUN/TAP : Invalid argument (code=22)
Feb 12 15:22:54 debian-js ovpn-static-server[5832]: write to TUN/TAP : Invalid argument (code=22)
Feb 12 15:23:03 debian-js ovpn-static-server[5832]: write to TUN/TAP : Invalid argument (code=22)
Feb 12 15:23:13 debian-js ovpn-static-server[5832]: write to TUN/TAP : Invalid argument (code=22)
Feb 12 15:23:23 debian-js ovpn-static-server[5832]: write to TUN/TAP : Invalid argument (code=22)
Feb 12 15:23:24 debian-js ovpn-static-server[5832]: write to TUN/TAP : Invalid argument (code=22)
Feb 12 15:23:35 debian-js ovpn-static-server[5832]: write to TUN/TAP : Invalid argument (code=22)
Feb 12 15:24:08 debian-js ovpn-static-server[5832]: write to TUN/TAP : Invalid argument (code=22)

I am new to OpenVPN. With PKI i was able to set a working VPN up but i have some troubles with PSK.

Regards and thanks
jompsi

jompsi

Hi debbie10t

Thanks for your help. Which log do you mean? Here is the output of the whole syslog, after my try today.

root@vd-vpn:/var/log# more syslog
Feb 13 06:25:01 vd-vpn rsyslogd: [origin software="rsyslogd" swVersion="5.8.11"
x-pid="1902" x-info="http://www.rsyslog.com"] rsyslogd was HUPed
Feb 13 07:17:01 vd-vpn /USR/SBIN/CRON[12613]: (root) CMD (   cd / && run-parts -
-report /etc/cron.hourly)
Feb 13 08:17:01 vd-vpn /USR/SBIN/CRON[12620]: (root) CMD (   cd / && run-parts -
-report /etc/cron.hourly)
Feb 13 08:27:37 vd-vpn ovpn-server[12352]: event_wait : Interrupted system call
(code=4)
Feb 13 08:27:37 vd-vpn ovpn-server[12352]: TCP/UDP: Closing socket
Feb 13 08:27:37 vd-vpn ovpn-server[12352]: Closing TUN/TAP interface
Feb 13 08:27:37 vd-vpn ovpn-server[12352]: /sbin/ifconfig tun0 0.0.0.0
Feb 13 08:27:37 vd-vpn ovpn-server[12352]: SIGTERM[hard,] received, process exit
ing

The log from yesterday was on my home computer, which I use for trying pruposes. This log is from the OpenVPN server from the office. If this is the wrong log file, please write me which you want.

Thanks a lot.

jompsi

Thanks. Will post it on monday. Had a lot to do in the office and forgot it totally. Have a nice weekend and you will hear from me 😉

jompsi

Hi

Here is the openvpn.log:

Mon Feb 17 11:33:09 2014 us=491772 Current Parameter Settings:
Mon Feb 17 11:33:09 2014 us=491889   config = '/etc/openvpn/static-server.conf'
Mon Feb 17 11:33:09 2014 us=491912   mode = 0
Mon Feb 17 11:33:09 2014 us=491928   persist_config = DISABLED
Mon Feb 17 11:33:09 2014 us=491943   persist_mode = 1
Mon Feb 17 11:33:09 2014 us=491957   show_ciphers = DISABLED
Mon Feb 17 11:33:09 2014 us=491972   show_digests = DISABLED
Mon Feb 17 11:33:09 2014 us=491986   show_engines = DISABLED
Mon Feb 17 11:33:09 2014 us=492001   genkey = DISABLED
Mon Feb 17 11:33:09 2014 us=492016   key_pass_file = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=492048   show_tls_ciphers = DISABLED
Mon Feb 17 11:33:09 2014 us=492119 Connection profiles [default]:
Mon Feb 17 11:33:09 2014 us=492139   proto = udp
Mon Feb 17 11:33:09 2014 us=492153   local = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=492168   local_port = 1194
Mon Feb 17 11:33:09 2014 us=492183   remote = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=492197   remote_port = 1194
Mon Feb 17 11:33:09 2014 us=492211   remote_float = DISABLED
Mon Feb 17 11:33:09 2014 us=492225   bind_defined = DISABLED
Mon Feb 17 11:33:09 2014 us=492239   bind_local = ENABLED
Mon Feb 17 11:33:09 2014 us=492253   connect_retry_seconds = 5
Mon Feb 17 11:33:09 2014 us=492268   connect_timeout = 10
Mon Feb 17 11:33:09 2014 us=492282   connect_retry_max = 0
Mon Feb 17 11:33:09 2014 us=492297   socks_proxy_server = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=492311   socks_proxy_port = 0
Mon Feb 17 11:33:09 2014 us=492325   socks_proxy_retry = DISABLED
Mon Feb 17 11:33:09 2014 us=492339 Connection profiles END
Mon Feb 17 11:33:09 2014 us=492353   remote_random = DISABLED
Mon Feb 17 11:33:09 2014 us=492367   ipchange = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=492386   dev = 'tun'
Mon Feb 17 11:33:09 2014 us=492401   dev_type = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=492415   dev_node = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=492431   lladdr = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=492451   topology = 1
Mon Feb 17 11:33:09 2014 us=492467   tun_ipv6 = DISABLED
Mon Feb 17 11:33:09 2014 us=492482   ifconfig_local = '10.8.0.1'
Mon Feb 17 11:33:09 2014 us=492497   ifconfig_remote_netmask = '10.8.0.2'
Mon Feb 17 11:33:09 2014 us=492512   ifconfig_noexec = DISABLED
Mon Feb 17 11:33:09 2014 us=492526   ifconfig_nowarn = DISABLED
Mon Feb 17 11:33:09 2014 us=492540   ifconfig_ipv6_local = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=492554   ifconfig_ipv6_netbits = 0
Mon Feb 17 11:33:09 2014 us=492569   ifconfig_ipv6_remote = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=492583   shaper = 0
Mon Feb 17 11:33:09 2014 us=492597   tun_mtu = 1500
Mon Feb 17 11:33:09 2014 us=492611   tun_mtu_defined = ENABLED
Mon Feb 17 11:33:09 2014 us=492625   link_mtu = 1500
Mon Feb 17 11:33:09 2014 us=492639   link_mtu_defined = DISABLED
Mon Feb 17 11:33:09 2014 us=492654   tun_mtu_extra = 0
Mon Feb 17 11:33:09 2014 us=492668   tun_mtu_extra_defined = DISABLED
Mon Feb 17 11:33:09 2014 us=492682   fragment = 0
Mon Feb 17 11:33:09 2014 us=492696   mtu_discover_type = -1
Mon Feb 17 11:33:09 2014 us=492710   mtu_test = 0
Mon Feb 17 11:33:09 2014 us=492724   mlock = DISABLED
Mon Feb 17 11:33:09 2014 us=492739   keepalive_ping = 0
Mon Feb 17 11:33:09 2014 us=492753   keepalive_timeout = 0
Mon Feb 17 11:33:09 2014 us=492767   inactivity_timeout = 0
Mon Feb 17 11:33:09 2014 us=492781   ping_send_timeout = 0
Mon Feb 17 11:33:09 2014 us=492795   ping_rec_timeout = 0
Mon Feb 17 11:33:09 2014 us=492810   ping_rec_timeout_action = 0
Mon Feb 17 11:33:09 2014 us=492824   ping_timer_remote = DISABLED
Mon Feb 17 11:33:09 2014 us=492838   remap_sigusr1 = 0
Mon Feb 17 11:33:09 2014 us=492852   explicit_exit_notification = 0
Mon Feb 17 11:33:09 2014 us=492866   persist_tun = DISABLED
Mon Feb 17 11:33:09 2014 us=492880   persist_local_ip = DISABLED
Mon Feb 17 11:33:09 2014 us=492895   persist_remote_ip = DISABLED
Mon Feb 17 11:33:09 2014 us=492908   persist_key = DISABLED
Mon Feb 17 11:33:09 2014 us=492923   mssfix = 1450
Mon Feb 17 11:33:09 2014 us=492937   passtos = DISABLED
Mon Feb 17 11:33:09 2014 us=492951   resolve_retry_seconds = 1000000000
Mon Feb 17 11:33:09 2014 us=492976   username = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=492991   groupname = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=493005   chroot_dir = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=493019   cd_dir = '/etc/openvpn'
Mon Feb 17 11:33:09 2014 us=493049   writepid = '/var/run/openvpn.static-server.pid'
Mon Feb 17 11:33:09 2014 us=493065   up_script = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=493080   down_script = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=493094   down_pre = DISABLED
Mon Feb 17 11:33:09 2014 us=493108   up_restart = DISABLED
Mon Feb 17 11:33:09 2014 us=493122   up_delay = DISABLED
Mon Feb 17 11:33:09 2014 us=493136   daemon = ENABLED
Mon Feb 17 11:33:09 2014 us=493150   inetd = 0
Mon Feb 17 11:33:09 2014 us=493164   log = ENABLED
Mon Feb 17 11:33:09 2014 us=493179   suppress_timestamps = DISABLED
Mon Feb 17 11:33:09 2014 us=493193   nice = 0
Mon Feb 17 11:33:09 2014 us=493207   verbosity = 4
Mon Feb 17 11:33:09 2014 us=493221   mute = 0
Mon Feb 17 11:33:09 2014 us=493235   gremlin = 0
Mon Feb 17 11:33:09 2014 us=493249   status_file = '/var/run/openvpn.static-server.status'
Mon Feb 17 11:33:09 2014 us=493264   status_file_version = 1
Mon Feb 17 11:33:09 2014 us=493278   status_file_update_freq = 10
Mon Feb 17 11:33:09 2014 us=493292   occ = ENABLED
Mon Feb 17 11:33:09 2014 us=493307   rcvbuf = 65536
Mon Feb 17 11:33:09 2014 us=493321   sndbuf = 65536
Mon Feb 17 11:33:09 2014 us=493334   sockflags = 0
Mon Feb 17 11:33:09 2014 us=493348   fast_io = DISABLED
Mon Feb 17 11:33:09 2014 us=493362   lzo = 0
Mon Feb 17 11:33:09 2014 us=493381   route_script = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=493396   route_default_gateway = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=493411   route_default_metric = 0
Mon Feb 17 11:33:09 2014 us=493425   route_noexec = DISABLED
Mon Feb 17 11:33:09 2014 us=493442   route_delay = 0
Mon Feb 17 11:33:09 2014 us=493458   route_delay_window = 30
Mon Feb 17 11:33:09 2014 us=493473   route_delay_defined = DISABLED
Mon Feb 17 11:33:09 2014 us=493488   route_nopull = DISABLED
Mon Feb 17 11:33:09 2014 us=493502   route_gateway_via_dhcp = DISABLED
Mon Feb 17 11:33:09 2014 us=493517   max_routes = 100
Mon Feb 17 11:33:09 2014 us=493531   allow_pull_fqdn = DISABLED
Mon Feb 17 11:33:09 2014 us=493546   management_addr = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=493560   management_port = 0
Mon Feb 17 11:33:09 2014 us=493574   management_user_pass = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=493589   management_log_history_cache = 250
Mon Feb 17 11:33:09 2014 us=493603   management_echo_buffer_size = 100
Mon Feb 17 11:33:09 2014 us=493618   management_write_peer_info_file = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=493632   management_client_user = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=493647   management_client_group = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=493661   management_flags = 0
Mon Feb 17 11:33:09 2014 us=493676   shared_secret_file = 'static.key'
Mon Feb 17 11:33:09 2014 us=493690   key_direction = 0
Mon Feb 17 11:33:09 2014 us=493704   ciphername_defined = ENABLED
Mon Feb 17 11:33:09 2014 us=493718   ciphername = 'BF-CBC'
Mon Feb 17 11:33:09 2014 us=493732   authname_defined = ENABLED
Mon Feb 17 11:33:09 2014 us=493746   authname = 'SHA1'
Mon Feb 17 11:33:09 2014 us=493760   prng_hash = 'SHA1'
Mon Feb 17 11:33:09 2014 us=493774   prng_nonce_secret_len = 16
Mon Feb 17 11:33:09 2014 us=493788   keysize = 0
Mon Feb 17 11:33:09 2014 us=493802   engine = DISABLED
Mon Feb 17 11:33:09 2014 us=493816   replay = ENABLED
Mon Feb 17 11:33:09 2014 us=493829   mute_replay_warnings = DISABLED
Mon Feb 17 11:33:09 2014 us=493843   replay_window = 64
Mon Feb 17 11:33:09 2014 us=493857   replay_time = 15
Mon Feb 17 11:33:09 2014 us=493871   packet_id_file = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=493885   use_iv = ENABLED
Mon Feb 17 11:33:09 2014 us=493899   test_crypto = DISABLED
Mon Feb 17 11:33:09 2014 us=493913   tls_server = DISABLED
Mon Feb 17 11:33:09 2014 us=493927   tls_client = DISABLED
Mon Feb 17 11:33:09 2014 us=493942   key_method = 2
Mon Feb 17 11:33:09 2014 us=493956   ca_file = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=493984   ca_path = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=494000   dh_file = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=494015   cert_file = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=494029   priv_key_file = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=494059   pkcs12_file = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=494073   cipher_list = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=494088   tls_verify = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=494102   tls_export_cert = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=494117   tls_remote = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=494131   crl_file = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=494145   ns_cert_type = 0
Mon Feb 17 11:33:09 2014 us=494160   remote_cert_ku[i] = 0
Mon Feb 17 11:33:09 2014 us=494174   remote_cert_ku[i] = 0
Mon Feb 17 11:33:09 2014 us=494188   remote_cert_ku[i] = 0
Mon Feb 17 11:33:09 2014 us=494202   remote_cert_ku[i] = 0
Mon Feb 17 11:33:09 2014 us=494215   remote_cert_ku[i] = 0
Mon Feb 17 11:33:09 2014 us=494229   remote_cert_ku[i] = 0
Mon Feb 17 11:33:09 2014 us=494243   remote_cert_ku[i] = 0
Mon Feb 17 11:33:09 2014 us=494256   remote_cert_ku[i] = 0
Mon Feb 17 11:33:09 2014 us=494270   remote_cert_ku[i] = 0
Mon Feb 17 11:33:09 2014 us=494284   remote_cert_ku[i] = 0
Mon Feb 17 11:33:09 2014 us=494298   remote_cert_ku[i] = 0
Mon Feb 17 11:33:09 2014 us=494312   remote_cert_ku[i] = 0
Mon Feb 17 11:33:09 2014 us=494326   remote_cert_ku[i] = 0
Mon Feb 17 11:33:09 2014 us=494340   remote_cert_ku[i] = 0
Mon Feb 17 11:33:09 2014 us=494353   remote_cert_ku[i] = 0
Mon Feb 17 11:33:09 2014 us=494367   remote_cert_ku[i] = 0
Mon Feb 17 11:33:09 2014 us=494381   remote_cert_eku = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=494395   tls_timeout = 2
Mon Feb 17 11:33:09 2014 us=494409   renegotiate_bytes = 0
Mon Feb 17 11:33:09 2014 us=494423   renegotiate_packets = 0
Mon Feb 17 11:33:09 2014 us=494437   renegotiate_seconds = 3600
Mon Feb 17 11:33:09 2014 us=494450   handshake_window = 60
Mon Feb 17 11:33:09 2014 us=494465   transition_window = 3600
Mon Feb 17 11:33:09 2014 us=494479   single_session = DISABLED
Mon Feb 17 11:33:09 2014 us=494493   push_peer_info = DISABLED
Mon Feb 17 11:33:09 2014 us=494507   tls_exit = DISABLED
Mon Feb 17 11:33:09 2014 us=494521   tls_auth_file = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=494535   pkcs11_protected_authentication = DISABLED
Mon Feb 17 11:33:09 2014 us=494549   pkcs11_protected_authentication = DISABLED
Mon Feb 17 11:33:09 2014 us=494564   pkcs11_protected_authentication = DISABLED
Mon Feb 17 11:33:09 2014 us=494578   pkcs11_protected_authentication = DISABLED
Mon Feb 17 11:33:09 2014 us=494592   pkcs11_protected_authentication = DISABLED
Mon Feb 17 11:33:09 2014 us=494606   pkcs11_protected_authentication = DISABLED
Mon Feb 17 11:33:09 2014 us=494620   pkcs11_protected_authentication = DISABLED
Mon Feb 17 11:33:09 2014 us=494633   pkcs11_protected_authentication = DISABLED
Mon Feb 17 11:33:09 2014 us=494647   pkcs11_protected_authentication = DISABLED
Mon Feb 17 11:33:09 2014 us=494661   pkcs11_protected_authentication = DISABLED
Mon Feb 17 11:33:09 2014 us=494675   pkcs11_protected_authentication = DISABLED
Mon Feb 17 11:33:09 2014 us=494689   pkcs11_protected_authentication = DISABLED
Mon Feb 17 11:33:09 2014 us=494703   pkcs11_protected_authentication = DISABLED
Mon Feb 17 11:33:09 2014 us=494717   pkcs11_protected_authentication = DISABLED
Mon Feb 17 11:33:09 2014 us=494731   pkcs11_protected_authentication = DISABLED
Mon Feb 17 11:33:09 2014 us=494745   pkcs11_protected_authentication = DISABLED
Mon Feb 17 11:33:09 2014 us=494760   pkcs11_private_mode = 00000000
Mon Feb 17 11:33:09 2014 us=494775   pkcs11_private_mode = 00000000
Mon Feb 17 11:33:09 2014 us=494789   pkcs11_private_mode = 00000000
Mon Feb 17 11:33:09 2014 us=494804   pkcs11_private_mode = 00000000
Mon Feb 17 11:33:09 2014 us=494818   pkcs11_private_mode = 00000000
Mon Feb 17 11:33:09 2014 us=494832   pkcs11_private_mode = 00000000
Mon Feb 17 11:33:09 2014 us=494846   pkcs11_private_mode = 00000000
Mon Feb 17 11:33:09 2014 us=494860   pkcs11_private_mode = 00000000
Mon Feb 17 11:33:09 2014 us=494883   pkcs11_private_mode = 00000000
Mon Feb 17 11:33:09 2014 us=494898   pkcs11_private_mode = 00000000
Mon Feb 17 11:33:09 2014 us=494913   pkcs11_private_mode = 00000000
Mon Feb 17 11:33:09 2014 us=494927   pkcs11_private_mode = 00000000
Mon Feb 17 11:33:09 2014 us=494941   pkcs11_private_mode = 00000000
Mon Feb 17 11:33:09 2014 us=494955   pkcs11_private_mode = 00000000
Mon Feb 17 11:33:09 2014 us=494969   pkcs11_private_mode = 00000000
Mon Feb 17 11:33:09 2014 us=494983   pkcs11_private_mode = 00000000
Mon Feb 17 11:33:09 2014 us=494998   pkcs11_cert_private = DISABLED
Mon Feb 17 11:33:09 2014 us=495012   pkcs11_cert_private = DISABLED
Mon Feb 17 11:33:09 2014 us=495025   pkcs11_cert_private = DISABLED
Mon Feb 17 11:33:09 2014 us=495054   pkcs11_cert_private = DISABLED
Mon Feb 17 11:33:09 2014 us=495069   pkcs11_cert_private = DISABLED
Mon Feb 17 11:33:09 2014 us=495083   pkcs11_cert_private = DISABLED
Mon Feb 17 11:33:09 2014 us=495098   pkcs11_cert_private = DISABLED
Mon Feb 17 11:33:09 2014 us=495112   pkcs11_cert_private = DISABLED
Mon Feb 17 11:33:09 2014 us=495126   pkcs11_cert_private = DISABLED
Mon Feb 17 11:33:09 2014 us=495140   pkcs11_cert_private = DISABLED
Mon Feb 17 11:33:09 2014 us=495154   pkcs11_cert_private = DISABLED
Mon Feb 17 11:33:09 2014 us=495168   pkcs11_cert_private = DISABLED
Mon Feb 17 11:33:09 2014 us=495182   pkcs11_cert_private = DISABLED
Mon Feb 17 11:33:09 2014 us=495196   pkcs11_cert_private = DISABLED
Mon Feb 17 11:33:09 2014 us=495210   pkcs11_cert_private = DISABLED
Mon Feb 17 11:33:09 2014 us=495224   pkcs11_cert_private = DISABLED
Mon Feb 17 11:33:09 2014 us=495238   pkcs11_pin_cache_period = -1
Mon Feb 17 11:33:09 2014 us=495252   pkcs11_id = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=495267   pkcs11_id_management = DISABLED
Mon Feb 17 11:33:09 2014 us=495299   server_network = 0.0.0.0
Mon Feb 17 11:33:09 2014 us=495317   server_netmask = 0.0.0.0
Mon Feb 17 11:33:09 2014 us=495342   server_network_ipv6 = ::
Mon Feb 17 11:33:09 2014 us=495359   server_netbits_ipv6 = 0
Mon Feb 17 11:33:09 2014 us=495375   server_bridge_ip = 0.0.0.0
Mon Feb 17 11:33:09 2014 us=495391   server_bridge_netmask = 0.0.0.0
Mon Feb 17 11:33:09 2014 us=495407   server_bridge_pool_start = 0.0.0.0
Mon Feb 17 11:33:09 2014 us=495423   server_bridge_pool_end = 0.0.0.0
Mon Feb 17 11:33:09 2014 us=495438   ifconfig_pool_defined = DISABLED
Mon Feb 17 11:33:09 2014 us=495454   ifconfig_pool_start = 0.0.0.0
Mon Feb 17 11:33:09 2014 us=495469   ifconfig_pool_end = 0.0.0.0
Mon Feb 17 11:33:09 2014 us=495485   ifconfig_pool_netmask = 0.0.0.0
Mon Feb 17 11:33:09 2014 us=495499   ifconfig_pool_persist_filename = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=495514   ifconfig_pool_persist_refresh_freq = 600
Mon Feb 17 11:33:09 2014 us=495528   ifconfig_ipv6_pool_defined = DISABLED
Mon Feb 17 11:33:09 2014 us=495543   ifconfig_ipv6_pool_base = ::
Mon Feb 17 11:33:09 2014 us=495558   ifconfig_ipv6_pool_netbits = 0
Mon Feb 17 11:33:09 2014 us=495572   n_bcast_buf = 256
Mon Feb 17 11:33:09 2014 us=495586   tcp_queue_limit = 64
Mon Feb 17 11:33:09 2014 us=495600   real_hash_size = 256
Mon Feb 17 11:33:09 2014 us=495614   virtual_hash_size = 256
Mon Feb 17 11:33:09 2014 us=495629   client_connect_script = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=495643   learn_address_script = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=495657   client_disconnect_script = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=495672   client_config_dir = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=495686   ccd_exclusive = DISABLED
Mon Feb 17 11:33:09 2014 us=495700   tmp_dir = '/tmp'
Mon Feb 17 11:33:09 2014 us=495714   push_ifconfig_defined = DISABLED
Mon Feb 17 11:33:09 2014 us=495730   push_ifconfig_local = 0.0.0.0
Mon Feb 17 11:33:09 2014 us=495745   push_ifconfig_remote_netmask = 0.0.0.0
Mon Feb 17 11:33:09 2014 us=495760   push_ifconfig_ipv6_defined = DISABLED
Mon Feb 17 11:33:09 2014 us=495776   push_ifconfig_ipv6_local = ::/0
Mon Feb 17 11:33:09 2014 us=495792   push_ifconfig_ipv6_remote = ::
Mon Feb 17 11:33:09 2014 us=495806   enable_c2c = DISABLED
Mon Feb 17 11:33:09 2014 us=495829   duplicate_cn = DISABLED
Mon Feb 17 11:33:09 2014 us=495845   cf_max = 0
Mon Feb 17 11:33:09 2014 us=495859   cf_per = 0
Mon Feb 17 11:33:09 2014 us=495873   max_clients = 1024
Mon Feb 17 11:33:09 2014 us=495887   max_routes_per_client = 256
Mon Feb 17 11:33:09 2014 us=495902   auth_user_pass_verify_script = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=495916   auth_user_pass_verify_script_via_file = DISABLED
Mon Feb 17 11:33:09 2014 us=495930   ssl_flags = 0
Mon Feb 17 11:33:09 2014 us=495944   port_share_host = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=495958   port_share_port = 0
Mon Feb 17 11:33:09 2014 us=495972   client = DISABLED
Mon Feb 17 11:33:09 2014 us=495986   pull = DISABLED
Mon Feb 17 11:33:09 2014 us=496000   auth_user_pass_file = '[UNDEF]'
Mon Feb 17 11:33:09 2014 us=496021 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 18 2013
Mon Feb 17 11:33:09 2014 us=496220 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Mon Feb 17 11:33:09 2014 us=496252 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Feb 17 11:33:09 2014 us=496560 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Feb 17 11:33:09 2014 us=496612 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Feb 17 11:33:09 2014 us=496729 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Feb 17 11:33:09 2014 us=496749 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Feb 17 11:33:09 2014 us=496803 Socket Buffers: R=[229376->131072] S=[229376->131072]
Mon Feb 17 11:33:09 2014 us=498546 TUN/TAP device tun0 opened
Mon Feb 17 11:33:09 2014 us=498598 TUN/TAP TX queue length set to 100
Mon Feb 17 11:33:09 2014 us=498636 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Feb 17 11:33:09 2014 us=498674 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Mon Feb 17 11:33:09 2014 us=502744 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:4 ET:0 EL:0 ]
Mon Feb 17 11:33:09 2014 us=502827 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.2 10.8.0.1,cipher BF-CBC,auth SHA1,keysize 128,secret'
Mon Feb 17 11:33:09 2014 us=502851 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.1 10.8.0.2,cipher BF-CBC,auth SHA1,keysize 128,secret'
Mon Feb 17 11:33:09 2014 us=502906 Local Options hash (VER=V4): 'c41bf3b8'
Mon Feb 17 11:33:09 2014 us=502935 Expected Remote Options hash (VER=V4): 'd3880969'
Mon Feb 17 11:33:09 2014 us=505748 UDPv4 link local (bound): [undef]
Mon Feb 17 11:33:09 2014 us=505831 UDPv4 link remote: [undef]
Mon Feb 17 11:34:07 2014 us=313649 Peer Connection Initiated with [AF_INET]62.167.2.203:55082
Mon Feb 17 11:34:07 2014 us=313753 Initialization Sequence Completed
Mon Feb 17 11:34:07 2014 us=313817 write to TUN/TAP : Invalid argument (code=22)
Mon Feb 17 11:34:32 2014 us=288169 write to TUN/TAP : Invalid argument (code=22)
Mon Feb 17 11:34:41 2014 us=920509 write to TUN/TAP : Invalid argument (code=22)
Mon Feb 17 11:34:52 2014 us=455451 write to TUN/TAP : Invalid argument (code=22)
Mon Feb 17 11:35:02 2014 us=127054 write to TUN/TAP : Invalid argument (code=22)
Mon Feb 17 11:35:12 2014 us=388494 write to TUN/TAP : Invalid argument (code=22)
Mon Feb 17 11:35:22 2014 us=541579 write to TUN/TAP : Invalid argument (code=22)
Mon Feb 17 11:35:32 2014 us=30362 write to TUN/TAP : Invalid argument (code=22)
Mon Feb 17 11:35:42 2014 us=511715 write to TUN/TAP : Invalid argument (code=22)
Mon Feb 17 11:35:52 2014 us=227166 write to TUN/TAP : Invalid argument (code=22)

Thanks a lot
Regards
jompsi

jompsi

Morning debbie10t

Thanks a lot for your help. I am really gratefull. I will try to do what is explained in the bug report, but this will take some time, because at the moment I have no time. We are working at the moment with PKI and this is more secure. I asked about the PSK because I want to know how this works too.
We also started already using the OpenVPN server with PKI and everytime i try to test the PSK i have to disable PKI.

I close this thread and have a look at PSK some time later.

But again, thanks and have a nice time

Regards
jompsi

jompsi

Hi debbie10t

It is working now with the PSK. I tried the whole thing on a new server with a new and clean setup. Now I built everything with a OpenVPN book, which I bought.

The OpenVPN is running on a Debian 7.4.0 server.

Here are the configs:
Server config:

cd /etc/openvpn
dev tun0
port 1194
proto udp
tun-mtu 1500
fragment 1300
mssfix
ifconfig 10.0.0.1 10.0.0.2
secret private/static_key.txt
verb 5

Client config:

cd /etc/openvpn
remote dns-name
dev tun0
port 1194
proto udp
tun-mtu 1500
fragment 1300
mssfix
ifconfig 10.0.0.2 10.0.0.1
secret private/static_key.txt
verb 5

Regards
jompsi