edge226
Okay, So I created an OpenVPN TAP server/client configuration which works for me at home. I brought my Chromebook to the college and BAM I get a TLS failure.
### server.conf ###
tls-server
client-to-client
proto udp
port 1194
dev tap
server 192.168.200.0 255.255.255.0
ca /etc/openvpn/cookbook/ca.crt
cert /etc/openvpn/cookbook/server.crt
key /etc/openvpn/cookbook/server.key
dh /etc/openvpn/cookbook/dh2048.pem
tls-auth /etc/openvpn/cookbook/ta.key 0
persist-key
persist-tun
keepalive 10 60
push "route 10.198.0.0 255.255.0.0"
user nobody
group nobody
daemon
log-append /var/log/openvpn.log
verb 5
suppress-timestamps
plugin /usr/lib64/openvpn/openvpn-plugin-auth-pam.so "login login USERNAME password PASSWORD"
### client.conf ###
client
tls-client
proto udp
remote <server-ip>
port 1194
dev tap
nobind
ca /home/chronos/user/Downloads/openvpn/ca.crt
cert /home/chronos/user/Downloads/openvpn/chromebook.crt
key /home/chronos/user/Downloads/openvpn/chromebook.key
tls-auth /home/chronos/user/Downloads/openvpn/ta.key 1
ns-cert-type server
remote-cert-tls server
auth-user-pass
auth-nocache
### Error on connection ###
Mon Mar 31 03:43:45 2014 OpenVPN 2.3.2 x86_64-cros-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Mar 25 2014
Enter Auth Username:<username>
Enter Auth Password:
Enter Private Key Password:
Mon Mar 31 03:43:55 2014 Control Channel Authentication: using '/home/chronos/user/Downloads/openvpn/ta.key' as a OpenVPN static key file
Mon Mar 31 03:43:55 2014 UDPv4 link local: [undef]
Mon Mar 31 03:43:55 2014 UDPv4 link remote: [AF_INET]<server-ip>:1194
Mon Mar 31 03:44:55 2014 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Mar 31 03:44:55 2014 TLS Error: TLS handshake failed
Mon Mar 31 03:44:55 2014 SIGUSR1[soft,tls-error] received, process restarting
### What Works ###
A manual connection on the server using the same ta.key used in the previous configs.
## on server ##
openvpn --ifconfig 10.200.0.1 255.255.255.0 --dev tap --secret /etc/openvpn/cookbook/ta.key
Mon Mar 31 05:47:56 2014 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built on Mar 29 2014
Mon Mar 31 05:47:56 2014 TUN/TAP device tap0 opened
Mon Mar 31 05:47:56 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Mar 31 05:47:56 2014 /sbin/ifconfig tap0 10.200.0.1 netmask 255.255.255.0 mtu 1500 broadcast 10.200.0.255
Mon Mar 31 05:47:56 2014 UDPv4 link local (bound): [undef]
Mon Mar 31 05:47:56 2014 UDPv4 link remote: [undef]
## on client ##
sudo openvpn --ifconfig 10.200.0.2 255.255.255.0 --dev tap --remote <server-ip> --secret ~/Downloads/openvpn/ta.key
Mon Mar 31 03:48:07 2014 OpenVPN 2.3.2 x86_64-cros-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Mar 25 2014
Mon Mar 31 03:48:07 2014 TUN/TAP device tap0 opened
Mon Mar 31 03:48:07 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Mar 31 03:48:07 2014 /bin/ifconfig tap0 10.200.0.2 netmask 255.255.255.0 mtu 1500 broadcast 10.200.0.255
Mon Mar 31 03:48:07 2014 UDPv4 link local (bound): [undef]
Mon Mar 31 03:48:07 2014 UDPv4 link remote: [AF_INET]<server-ip>:1194
Anyone know why once I add the certificates on this connection it goes bust?
