We have a openvpn server running on debain.
We are try to get the a windows 2008 server to connect to it as a client.
It connects and gets a IP. But after a few seconds it drops the connection.
We get the error:
ERROR: could not not read Private Key password from stdin
Full log on the client:
Wed Aug 19 14:54:44 2015 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed Aug 19 14:54:44 2015 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Wed Aug 19 14:54:44 2015 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Aug 19 14:54:47 2015 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Aug 19 14:54:47 2015 LZO compression initialized
Wed Aug 19 14:54:47 2015 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Aug 19 14:54:47 2015 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Aug 19 14:54:47 2015 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Aug 19 14:54:47 2015 Local Options hash (VER=V4): '41690919'
Wed Aug 19 14:54:47 2015 Expected Remote Options hash (VER=V4): '530fdded'
Wed Aug 19 14:54:47 2015 UDPv4 link local: [undef]
Wed Aug 19 14:54:47 2015 UDPv4 link remote:-:1194
Wed Aug 19 14:54:47 2015 TLS: Initial packet from -:1194, sid=5b4d58cd 58cb39f2
Wed Aug 19 14:54:47 2015 VERIFY OK: depth=1, /C=NL/ST=ZH/L=DenHaag/O=Digiforce/CN=Digiforce_CA/emailAddress=
info@digiforcedenhaag.nl
Wed Aug 19 14:54:47 2015 VERIFY OK: depth=0, /C=NL/ST=ZH/L=DenHaag/O=Digiforce/CN=server/emailAddress=
info@digiforcedenhaag.nl
Wed Aug 19 14:54:47 2015 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Aug 19 14:54:47 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Aug 19 14:54:47 2015 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Aug 19 14:54:47 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Aug 19 14:54:47 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Aug 19 14:54:47 2015 [server] Peer Connection Initiated with -:1194
Wed Aug 19 14:54:49 2015 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Aug 19 14:54:49 2015 PUSH: Received control message: 'PUSH_REPLY,route 10.0.1.0 255.255.255.0,route 10.0.2.0 255.255.255.0,route-gateway 10.0.3.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.0.3.24 255.255.255.0'
Wed Aug 19 14:54:49 2015 OPTIONS IMPORT: timers and/or timeouts modified
Wed Aug 19 14:54:49 2015 OPTIONS IMPORT: --ifconfig/up options modified
Wed Aug 19 14:54:49 2015 OPTIONS IMPORT: route options modified
Wed Aug 19 14:54:49 2015 OPTIONS IMPORT: route-related options modified
Wed Aug 19 14:54:49 2015 ROUTE default_gateway=192.168.200.1
Wed Aug 19 14:54:49 2015 TAP-WIN32 device [Local Area Connection 4] opened: \\.\Global\{9BF7FB54-2F2A-4F84-BCED-6CA1A9600723}.tap
Wed Aug 19 14:54:49 2015 TAP-Win32 Driver Version 9.9
Wed Aug 19 14:54:49 2015 TAP-Win32 MTU=1500
Wed Aug 19 14:54:49 2015 Set TAP-Win32 TUN subnet mode network/local/netmask = 10.0.3.0/10.0.3.24/255.255.255.0 [SUCCEEDED]
Wed Aug 19 14:54:49 2015 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.0.3.24/255.255.255.0 on interface {9BF7FB54-2F2A-4F84-BCED-6CA1A9600723} [DHCP-serv: 10.0.3.254, lease-time: 31536000]
Wed Aug 19 14:54:49 2015 Successful ARP Flush on interface [20] {9BF7FB54-2F2A-4F84-BCED-6CA1A9600723}
Wed Aug 19 14:54:50 2015 Replay-window backtrack occurred [5]
Wed Aug 19 14:54:50 2015 Replay-window backtrack occurred [6]
Wed Aug 19 14:54:54 2015 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Wed Aug 19 14:54:54 2015 C:\WINDOWS\system32\route.exe ADD 10.0.1.0 MASK 255.255.255.0 10.0.3.1
Wed Aug 19 14:54:54 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Aug 19 14:54:54 2015 Route addition via IPAPI succeeded [adaptive]
Wed Aug 19 14:54:54 2015 C:\WINDOWS\system32\route.exe ADD 10.0.2.0 MASK 255.255.255.0 10.0.3.1
Wed Aug 19 14:54:54 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Aug 19 14:54:54 2015 Route addition via IPAPI succeeded [adaptive]
Wed Aug 19 14:54:54 2015 Initialization Sequence Completed
Wed Aug 19 14:55:00 2015 Replay-window backtrack occurred [7]
Wed Aug 19 14:55:00 2015 Replay-window backtrack occurred [8]
Wed Aug 19 14:55:00 2015 TCP/UDP: Closing socket
Wed Aug 19 14:55:00 2015 C:\WINDOWS\system32\route.exe DELETE 10.0.2.0 MASK 255.255.255.0 10.0.3.1
Wed Aug 19 14:55:00 2015 Route deletion via IPAPI succeeded [adaptive]
Wed Aug 19 14:55:00 2015 C:\WINDOWS\system32\route.exe DELETE 10.0.1.0 MASK 255.255.255.0 10.0.3.1
Wed Aug 19 14:55:00 2015 Route deletion via IPAPI succeeded [adaptive]
Wed Aug 19 14:55:00 2015 Closing TUN/TAP interface
Wed Aug 19 14:55:00 2015 SIGTERM[hard,] received, process exiting
Wed Aug 19 14:55:00 2015 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed Aug 19 14:55:00 2015 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Wed Aug 19 14:55:00 2015 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
---
disconnect
---
Wed Aug 19 14:55:00 2015 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed Aug 19 14:55:00 2015 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Wed Aug 19 14:55:00 2015 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
