Hello world.
I'm trying to setup OpenVPN to work on 6667 port.
Is there some infos about
the server :
lstronic# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: venet0: <BROADCAST,POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
link/void
inet 127.0.0.2/32 scope host venet0
inet 149.91.81.65/32 brd 149.91.81.65 scope global venet0:0
8: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100
link/none
inet 10.8.0.1 peer 10.8.0.2/32 scope global tun0
lstronic# /sbin/iptables -L -t nat
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- 10.8.0.0/24 anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
lstronic# cat /etc/openvpn/yunohost.conf
port 6667
dev tun
proto udp
ca /etc/yunohost/certs/admin.lstronic.com/ca.pem
cert /etc/yunohost/certs/admin.lstronic.com/crt.pem
key /etc/yunohost/certs/admin.lstronic.com/key.pem
dh /etc/yunohost/certs/admin.lstronic.com/dh.pem
server 10.8.0.0 255.255.255.0
route 10.8.0.0 255.255.255.0
keepalive 10 60
inactive 600
user openvpn
group openvpn
persist-tun
persist-key
verb 3
plugin /usr/lib/openvpn/openvpn-auth-ldap.so /etc/openvpn/auth/ldap.conf
client-cert-not-required
status /var/log/openvpn.log
comp-lzo
push "redirect-gateway def1"
push "dhcp-option DNS 10.8.0.1"
lstronic# cat /var/log/openvpn.log
OpenVPN CLIENT LIST
Updated,Wed Sep 16 10:21:37 2015
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
ROUTING TABLE
Virtual Address,Common Name,Real Address,Last Ref
GLOBAL STATS
Max bcast/mcast queue length,0
END
And there also some logs from
client :
$ cat admin.lstronic.com.ovpn
client
dev tun
proto udp
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo yes
verb 3
remote admin.lstronic.com 6667
route-delay
reneg-sec 0
redirect-gateway
script-security 2
--auth-user-pass
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
$ sudo openvpn admin.lstronic.com.ovpn
Mot de passe [sudo] de leo :
Wed Sep 16 10:24:01 2015 OpenVPN 2.3.8 x86_64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Sep 14 2015
Wed Sep 16 10:24:01 2015 library versions: OpenSSL 1.0.2d 9 Jul 2015, LZO 2.09
Enter Auth Username: ***
Enter Auth Password: ************
Wed Sep 16 10:24:11 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Sep 16 10:24:11 2015 Socket Buffers: R=[212992->131072] S=[212992->131072]
Wed Sep 16 10:24:11 2015 UDPv4 link local: [undef]
Wed Sep 16 10:24:11 2015 UDPv4 link remote: [AF_INET]149.91.81.65:6667
Wed Sep 16 10:24:11 2015 TLS: Initial packet from [AF_INET]149.91.81.65:6667, sid=7f4fe2d1 a28da2b6
Wed Sep 16 10:24:11 2015 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Sep 16 10:24:11 2015 VERIFY ERROR: depth=0, error=self signed certificate: C=FR, ST=France, O=LSTRONIC, CN=admin.lstronic.com
Wed Sep 16 10:24:11 2015 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Wed Sep 16 10:24:11 2015 TLS Error: TLS object -> incoming plaintext read error
Wed Sep 16 10:24:11 2015 TLS Error: TLS handshake failed
Wed Sep 16 10:24:11 2015 SIGUSR1[soft,tls-error] received, process restarting
Wed Sep 16 10:24:11 2015 Restart pause, 2 second(s)
Wed Sep 16 10:24:13 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Sep 16 10:24:13 2015 Socket Buffers: R=[212992->131072] S=[212992->131072]
Wed Sep 16 10:24:13 2015 UDPv4 link local: [undef]
Wed Sep 16 10:24:13 2015 UDPv4 link remote: [AF_INET]149.91.81.65:6667
Wed Sep 16 10:24:13 2015 TLS: Initial packet from [AF_INET]149.91.81.65:6667, sid=4c760116 22a686f0
Wed Sep 16 10:24:13 2015 VERIFY ERROR: depth=0, error=self signed certificate: C=FR, ST=France, O=LSTRONIC, CN=admin.lstronic.com
Wed Sep 16 10:24:13 2015 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Wed Sep 16 10:24:13 2015 TLS Error: TLS object -> incoming plaintext read error
Wed Sep 16 10:24:13 2015 TLS Error: TLS handshake failed
Wed Sep 16 10:24:13 2015 SIGUSR1[soft,tls-error] received, process restarting
Wed Sep 16 10:24:13 2015 Restart pause, 2 second(s)
Wed Sep 16 10:24:15 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Sep 16 10:24:15 2015 Socket Buffers: R=[212992->131072] S=[212992->131072]
Wed Sep 16 10:24:15 2015 UDPv4 link local: [undef]
Wed Sep 16 10:24:15 2015 UDPv4 link remote: [AF_INET]149.91.81.65:6667
Wed Sep 16 10:24:15 2015 TLS: Initial packet from [AF_INET]149.91.81.65:6667, sid=1c547efa 39bfda8e
Wed Sep 16 10:24:16 2015 VERIFY ERROR: depth=0, error=self signed certificate: C=FR, ST=France, O=LSTRONIC, CN=admin.lstronic.com
Wed Sep 16 10:24:16 2015 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Wed Sep 16 10:24:16 2015 TLS Error: TLS object -> incoming plaintext read error
Wed Sep 16 10:24:16 2015 TLS Error: TLS handshake failed
Wed Sep 16 10:24:16 2015 SIGUSR1[soft,tls-error] received, process restarting
Wed Sep 16 10:24:16 2015 Restart pause, 2 second(s)
Wed Sep 16 10:24:18 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Sep 16 10:24:18 2015 Socket Buffers: R=[212992->131072] S=[212992->131072]
Wed Sep 16 10:24:18 2015 UDPv4 link local: [undef]
Wed Sep 16 10:24:18 2015 UDPv4 link remote: [AF_INET]149.91.81.65:6667
Wed Sep 16 10:24:18 2015 TLS: Initial packet from [AF_INET]149.91.81.65:6667, sid=c85c0dfe cbf958e0
Wed Sep 16 10:24:18 2015 VERIFY ERROR: depth=0, error=self signed certificate: C=FR, ST=France, O=LSTRONIC, CN=admin.lstronic.com
Wed Sep 16 10:24:18 2015 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Wed Sep 16 10:24:18 2015 TLS Error: TLS object -> incoming plaintext read error
Wed Sep 16 10:24:18 2015 TLS Error: TLS handshake failed
Wed Sep 16 10:24:18 2015 SIGUSR1[soft,tls-error] received, process restarting
Wed Sep 16 10:24:18 2015 Restart pause, 2 second(s)
Wed Sep 16 10:24:20 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Sep 16 10:24:20 2015 Socket Buffers: R=[212992->131072] S=[212992->131072]
Wed Sep 16 10:24:20 2015 UDPv4 link local: [undef]
Wed Sep 16 10:24:20 2015 UDPv4 link remote: [AF_INET]149.91.81.65:6667
Wed Sep 16 10:24:20 2015 TLS: Initial packet from [AF_INET]149.91.81.65:6667, sid=b99728d0 a28d1336
Wed Sep 16 10:24:20 2015 VERIFY ERROR: depth=0, error=self signed certificate: C=FR, ST=France, O=LSTRONIC, CN=admin.lstronic.com
Wed Sep 16 10:24:20 2015 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Wed Sep 16 10:24:20 2015 TLS Error: TLS object -> incoming plaintext read error
Wed Sep 16 10:24:20 2015 TLS Error: TLS handshake failed
Wed Sep 16 10:24:20 2015 SIGUSR1[soft,tls-error] received, process restarting
Wed Sep 16 10:24:20 2015 Restart pause, 2 second(s)
^CWed Sep 16 10:24:20 2015 SIGINT[hard,init_instance] received, process exiting
If somebody have an idea of the problem 🙂
I've not huge skill on sysadmin 😉
Léo (french)
