Hi,
i have a setup with a Windows 2012 R2 Server with OpenVPN Server with a public ip adress. I used this guide (
https://community.openvpn.net/openvpn/wiki/Easy_Windows_Guide) to install OpenVPN Server and to generate all certificates. I also configured succesfully a windows 8.1 Client. He can connect to the Server and everything is fine. Now I try to get a Debian 7.8 into the network as client. It's also a server with a public ip adress. On Debian I installed OpenVPN succesfully, but I can not connect to the Windows Server. Even I use the client certificate of the windows client.
Here is my server config:
port 1194
proto udp
dev tun
#
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\windowsserver.crt"
key "C:\\Program Files\\OpenVPN\\config\\windowsserver.key"
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
Here is the client config of the debian system:
client
dev tun
proto udp
remote 145.111.9.4 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/pc.crt
key /etc/openvpn/easy-rsa/keys/pc.key
comp-lzo
verb 3
Here is the error of the debian system:
Wed Feb 4 21:23:50 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Feb 4 21:23:50 2015 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Feb 4 21:23:50 2015 Re-using SSL/TLS context
Wed Feb 4 21:23:50 2015 LZO compression initialized
Wed Feb 4 21:23:50 2015 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Feb 4 21:23:50 2015 Socket Buffers: R=[229376->131072] S=[229376->131072]
Wed Feb 4 21:23:50 2015 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Feb 4 21:23:50 2015 Local Options hash (VER=V4): '41690919'
Wed Feb 4 21:23:50 2015 Expected Remote Options hash (VER=V4): '530fdded'
Wed Feb 4 21:23:50 2015 UDPv4 link local: [undef]
Wed Feb 4 21:23:50 2015 UDPv4 link remote: [AF_INET]145.111.9.4:1194
Wed Feb 4 21:23:50 2015 TLS: Initial packet from [AF_INET]145.111.9.4:1194, sid=b1dc3b0a 77f2ac17
Wed Feb 4 21:23:50 2015 VERIFY ERROR: depth=1, error=certificate is not yet valid: /C=DE/ST=DE/L=HH/O=OpenVPN/OU=Schmidt/CN=Schmidt/name=Schmidt/emailAddress=irgendeinemail@gmail.com
Wed Feb 4 21:23:50 2015 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Wed Feb 4 21:23:50 2015 TLS Error: TLS object -> incoming plaintext read error
Wed Feb 4 21:23:50 2015 TLS Error: TLS handshake failed
Wed Feb 4 21:23:50 2015 TCP/UDP: Closing socket
Wed Feb 4 21:23:50 2015 SIGUSR1[soft,tls-error] received, process restarting
Wed Feb 4 21:23:50 2015 Restart pause, 2 second(s)
In total I tried to everything I know. The certificates are valid because they work on a windows client. I used google with the error messages and I also renew the certifikates. But I have no idea anymore. Please help :-)
