kuroro115
Hello everyone~
I have a trouble with my openvpn connect.
I use two servers to do OpenVPN with site to site,one is openwrt the other is centos.
Following is my config.
CENTOS:
port 1150
proto udp
remote 1.1.1.1
dev tun
ifconfig 10.8.0.1 10.8.0.2
secret /etc/openvpn/ta.key
route 10.8.0.0 255.255.255.0
comp-lzo
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
user nobody
group nobody
daemon
OPENWRT:
config openvpn 'client'
option dev 'tun'
option nobind '1'
option verb '3'
option comp_lzo 'yes'
option client '1'
option remote '2.2.2.2'
option port '1150'
option proto 'udp'
option secret '/etc/openvpn/ta.key'
option ifconfig '10.8.0.2 10.8.0.1'
option persist_tun '1'
option persist_key '1'
option log '/var/openvpn.log'
option keepalive '10 60'
option remote_random '0'
option remote_cert_tls 'server'
I'm sure these two ta.key are the same.
Now when I open the openvpn will produce the following error:
CENTOS
Dec 3 04:55:30 centos-7-x64 openvpn[13192]: Re-using pre-shared static key
Dec 3 04:55:30 centos-7-x64 openvpn[13192]: Preserving previous TUN/TAP instance: tun0
Dec 3 04:55:30 centos-7-x64 openvpn[13192]: UDPv4 link local (bound): [undef]
Dec 3 04:55:30 centos-7-x64 openvpn[13192]: UDPv4 link remote: [AF_INET]2.2.2.2:1150
Dec 3 04:55:55 centos-7-x64 sshd[13266]: error: Could not load host key: /etc/ssh/ssh_host_ed2 5519_key
OPENWRT
Thu Dec 3 17:39:30 2015 daemon.notice openvpn(client)[13943]: OpenVPN 2.3.6 mips-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Jun 1 2015
Thu Dec 3 17:39:30 2015 daemon.notice openvpn(client)[13943]: library versions: OpenSSL 1.0.2a 19 Mar 2015, LZO 2.08
Thu Dec 3 17:39:30 2015 daemon.err openvpn(client)[13943]: Error: private key password verification failed
Thu Dec 3 17:39:30 2015 daemon.notice openvpn(client)[13943]: Exiting due to fatal error
Thu Dec 3 17:39:30 2015 daemon.info procd: Instance openvpn::instance1 s in a crash loop 6 crashes, 0 seconds since last crash
Thu Dec 3 17:40:07 2015 daemon.notice openvpn(client)[14002]: OpenVPN 2.3.6 mips-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Jun 1 2015
Thu Dec 3 17:40:07 2015 daemon.notice openvpn(client)[14002]: library versions: OpenSSL 1.0.2a 19 Mar 2015, LZO 2.08
Thu Dec 3 17:40:07 2015 daemon.err openvpn(client)[14002]: Error: private key password verification failed
Thu Dec 3 17:40:07 2015 daemon.notice openvpn(client)[14002]: Exiting due to fatal error
TUN0 interface can not be opened on openwrt.
Who can help me?thanks.