No server certificate verification method has been enabled

altiris

I finally installed openvpn following a guide from digitalocean but now I am having trouble connecting to it from a windows client, I get this error as you can see below.

Wed Sep 03 15:30:05 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug  7 2014
Wed Sep 03 15:30:05 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Enter Management Password:
Wed Sep 03 15:30:05 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Sep 03 15:30:05 2014 Need hold release from management interface, waiting...
Wed Sep 03 15:30:05 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Sep 03 15:30:05 2014 MANAGEMENT: CMD 'state on'
Wed Sep 03 15:30:05 2014 MANAGEMENT: CMD 'log all on'
Wed Sep 03 15:30:05 2014 MANAGEMENT: CMD 'hold off'
Wed Sep 03 15:30:05 2014 MANAGEMENT: CMD 'hold release'
Wed Sep 03 15:30:05 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Wed Sep 03 15:30:05 2014 MANAGEMENT: Client disconnected
Wed Sep 03 15:30:05 2014 Cannot load inline certificate file: error:0906D06C:PEM routines:PEM_read_bio:no start line: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib
Wed Sep 03 15:30:05 2014 Exiting due to fatal error

Ive went to the site http://openvpn.net/howto.html#mitm and I tried adding "remote-cert-tls server" to my client.ovpn file but I just get the error that you can see above which is "Cannot load inline certificate file.....". What seems to be the problem here?

server.conf

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh2048.pem

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3

client.ovpn

client
dev tun
proto udp
remote 96.242.131.101 1194
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo
verb 3
<ca>
</ca>
<cert>
</cert>
<key>
</key>

(Obviously I have the ca, cert and key filled in but removed them when posting here.

altiris

EDIT: I figured out what the problem was, and it was that I didnt add the parts that had BEING and END CERTIFICATE in the .ovpn file. When I connect using the terminal, it says I am successfully connected but after a few seconds instead of being connected I lose internet.

buccanan2

altiris wroteEDIT: I figured out what the problem was, and it was that I didnt add the parts that had BEING and END CERTIFICATE in the .ovpn file. When I connect using the terminal, it says I am successfully connected but after a few seconds instead of being connected I lose internet.

Thanks for the info. I was with the same problem. The problem is; when you connect, your location changes, the DNS probably dont accept the new location conections.

Try to edit /etc/resolv.conf with leafpad, nano... and insert the Google DNS server ip 8.8.8.8
It work to me.

> cat /etc/resolv.conf
# Generated by NetworkManager
nameserver (one ip (dns server) here who's not working connected to VPN)
nameserver (other ip)

> apt-get install leafpad

>leafpad /etc/resolv.conf
# Generated by NetworkManager
nameserver (ip)
nameserver (ip)
nameserver 8.8.8.8 <------------------- this is the line you have to write and save