Hi community :ugeek: ,
I have installed en OpenVPN server on my ubuntu server.
I might need some helpl, I can't figure out what I have done wrong.
I'll skip the installation part,
I have followed this tutorial for the install part :
install and
(crt, keys)
sudo openvpn server.conf
...
Fri May 30 01:44:12 2014 Initialization Sequence Completed
From my windows client, when I run
telnet 195.x.x.x 443
Openvpn console output
Fri May 30 01:49:56 2014 TCP connection established with [AF_INET]82.x.x.x:59494
From localhost, when I run
nmap localhost
PORT STATE SERVICE
22/tcp open ssh
53/tcp open domain
443/tcp open https
Everything seams to run fine, I have downloaded this OpenVPN client : openvpn-install-2.3.4-I001-x86_64.exe
(I've also tried SecurepointSSLVPN_v1.0.3.exe)
With all the cert and keys in the openvpn/configs, I still got this :
Fri May 30 03:52:23 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May 2 2014
Fri May 30 03:52:23 2014 library versions: OpenSSL 1.0.1g 7 Apr 2014, LZO 2.05
Enter Management Password:
Fri May 30 03:52:23 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri May 30 03:52:23 2014 Need hold release from management interface, waiting...
Fri May 30 03:52:24 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri May 30 03:52:24 2014 MANAGEMENT: CMD 'state on'
Fri May 30 03:52:24 2014 MANAGEMENT: CMD 'log all on'
Fri May 30 03:52:24 2014 MANAGEMENT: CMD 'hold off'
Fri May 30 03:52:24 2014 MANAGEMENT: CMD 'hold release'
Fri May 30 03:52:24 2014 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Fri May 30 03:52:24 2014 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Fri May 30 03:52:24 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 30 03:52:24 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 30 03:52:24 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri May 30 03:52:24 2014 Attempting to establish TCP connection with [AF_INET]195.x.x.x:443
Fri May 30 03:52:24 2014 MANAGEMENT: >STATE:1401414744,TCP_CONNECT,,,
Fri May 30 03:52:45 2014 TCP: connect to [AF_INET]195.x.x.x:443 failed, will try again in 5 seconds: Connection timed out (WSAETIMEDOUT)
my server.conf
# Serveur TCP/443
mode server
proto tcp
port 443
dev tun
# Cles et certificats
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
tls-auth ta.key 1
key-direction 0
cipher AES-256-CBC
# Reseau
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
# Securite
user nobody
group nogroup
chroot /etc/openvpn/jail
persist-key
persist-tun
comp-lzo
# Log
verb 3
mute 20
status openvpn-status.log
; log-append /var/log/openvpn.log
my client.conf
# Client
client
dev tun
proto tcp-client
remote 195.154.7.13 443
resolv-retry infinite
cipher AES-256-CBC
; client-config-dir ccd
# Cles
ca ca.crt
cert client.crt
key client.key
tls-auth ta.key 1
key-direction 1
# Securite
nobind
persist-key
persist-tun
comp-lzo
verb 3
I have tried to modify and look the config file in many ways, but I still can't connect a client to this vpnserver.
