[Noob] Certificates problem?

fervi

Hello!

Sorry for the poor quality of my English language

Well - from 3 days to tire of OpenVPN. I thought yesterday working - but not working

Well - I have a server (debian) with two network adapters (eth0 and eth1). Eth0 is the external network (it will be soon connected to the internet directly), eth1 is the internal network (computers in the company will be connected here)

Perhaps the problem stems from the fact that I do not know how the certificates.

Well and Test was the server, I connected the test client and it worked.
I created another certificate (./source vars and build-key <name>), a new computer with a new certificate walked (but only for a while, unless server has crashed)

However, when I try to use the test client - server I get an error
TLS key negotiation failed
TLS handshake failed

despite the fact that 30 minutes earlier OpenVPN (test client) can connect. You may need every time generate new certificates?

If you have something you need to diagnose - let me know

Thank you
Fervi

http://gmclan.org/up6184_0_server.html
http://gmclan.org/uploader/6184/client.txt

fervi

http://gmclan.org/up6184_3_openvpn.html

Here are the logs

Overall, my network has a look like this
Internet -> Server (eth0) -> Server (eth1 / br0) -> PCs
Yes, anyone with internet access could (after verification) have access to the internal network

Sorry, I'm awfully tired, already three days I sit on OpenVPN and I have problems.

Graphical frontend (gadmin-openvpn-server) configures OpenVPN, but uses the same key for the server that the client (this works - but probably not the case in the certificates)

Alternatively, can I produce bad CA and keys?

source ./vars
./clean-all
./build-ca
./build-key-server <server_name>
./build-key <client_name>
./build-dh

Fervi
PS. 172.16.0.1 - eth1
192.168.1.33 - eth0

fervi

Sorry, I'm an idiot

I tried to connect to the internal network - being in the internal network
Of course, from the outside goes

I'm sorry again
Fervi

fervi

Yep, use only external connection

Fervi