I have an Ubuntu server set up as the VPN server. I would like to have clients log into the server and be able to see each other. Currently, when I try to connect, I get the following:
Tue Sep 16 14:18:45 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 7 2014
Tue Sep 16 14:18:45 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Tue Sep 16 14:18:45 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Sep 16 14:18:45 2014 Need hold release from management interface, waiting...
Tue Sep 16 14:18:46 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Sep 16 14:18:46 2014 MANAGEMENT: CMD 'state on'
Tue Sep 16 14:18:46 2014 MANAGEMENT: CMD 'log all on'
Tue Sep 16 14:18:46 2014 MANAGEMENT: CMD 'hold off'
Tue Sep 16 14:18:46 2014 MANAGEMENT: CMD 'hold release'
Tue Sep 16 14:18:46 2014 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Tue Sep 16 14:18:46 2014 Control Channel Authentication: tls-auth using INLINE static key file
Tue Sep 16 14:18:46 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Sep 16 14:18:46 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Sep 16 14:18:46 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Sep 16 14:18:46 2014 UDPv4 link local: [undef]
Tue Sep 16 14:18:46 2014 UDPv4 link remote: [AF_INET]x.x.x.x:1194
Tue Sep 16 14:18:46 2014 MANAGEMENT: >STATE:1410891526,WAIT,,,
Tue Sep 16 14:19:46 2014 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Sep 16 14:19:46 2014 TLS Error: TLS handshake failed
Tue Sep 16 14:19:46 2014 SIGUSR1[soft,tls-error] received, process restarting
Tue Sep 16 14:19:46 2014 MANAGEMENT: >STATE:1410891586,RECONNECTING,tls-error,,
Tue Sep 16 14:19:46 2014 Restart pause, 2 second(s)
Tue Sep 16 14:19:48 2014 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Tue Sep 16 14:19:48 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Sep 16 14:19:48 2014 UDPv4 link local: [undef]
Tue Sep 16 14:19:48 2014 UDPv4 link remote: [AF_INET]x.x.x.x:1194
Tue Sep 16 14:19:48 2014 MANAGEMENT: >STATE:1410891588,WAIT,,,
Here is the server.conf:
ifconfig-pool-persist ipp.txt
duplicate-cn
max-clients 10
persist-key
persist-tun
dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh2048.pem
user nobody
group nogroup
server 10.8.0.0 255.255.255.0
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 3
client-to-client
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
log-append /var/log/openvpn
comp-lzo
Here is the client.opvn:
dev tun
client
proto udp
remote 82x.xxx.xxx.xxx
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo
verb 3
<ca>
-----BEGIN CERTIFICATE-----
MIIDqzCCAxSgAwIBAgIJAKZd8Ml4I8PCMA0GCSqGSIb3DQEBCwUAMIGWMQswCQYD
...
uyMCEkpNCOvrgcv4Vx18Z1vYM5kifU+amteRyzgNpw==
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
MIID7zCCA1igAwIBAgIBAzANBgkqhkiG9w0BAQsFADCBljELMAkGA1UEBhMCVVMx
...
CiYCdabSLTAIsjkObVNHHrLwAULWt12z0U207rV3pNyZAADeiuOllFTAPYUh3NLY
R5yc
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
MIICdwIBADANBgkqhkiG9w0BAQEFAASCAmEwggJdAgEAAoGBAMAHQGaROYblob56
...
PdqaAK04n9anjia8TEHZ/PD36H2YvgGWRKYM1A0NEY2TEuxBUidgJ859mI+u2+BV
BKWUBXLeHQbmyc0=
-----END PRIVATE KEY-----
</key>
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
51ae9fe4dc5ed6ecc0cf4b2e51950ee2
...
5bafdbf378225737c4626231575c26e5
-----END OpenVPN Static key V1-----
</tls-auth>
Thank you.
