Cant't connect to OpenVPN server...

jagdtigger

Greetings.

Almost a year has past since my last troubles and here we go again. So all of the sudden i cant connect to the openvpn server despite the fact that it has network access(can SSH in, ping google, etc). I didnt see any ftal errors in log but i upload it just in case:
https://dl.dropboxusercontent.com/u/1201829/openvpn/logopenvpn.log

Have someone an idea what went wrong?

Thanks advance for the help 🙂 .

Traffic

jagdtigger wroteWed Mar 9 22:17:31 2016 us=977092 local = '192.168.1.101'

jagdtigger

The remote network range is 192.168.43.x so it shouldn't be a problem, i used it originally without telling to the server which ip to listen on....

Traffic

That was all the info you provided ..

Please see the Forum rules (top of page)

--verb 11 is a bit too high to be of use at this time.

jagdtigger

Oopsy... :oops:

Local IP range: 192.168.1.x
Remote IP range is usually 192.168.43.x(im using my phones mobile hotspot function to share the phones internet woith my laptop).
VPN IP range: 192.168.1.110-120

Server.conf:

local 192.168.1.101
port portnumber
proto udp
dev tap0
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh2048.pem
server-bridge 192.168.1.0 255.255.255.0 192.168.1.110 192.168.1.120
ifconfig-pool-persist ipp.txt
keepalive 10 120
tls-auth /etc/openvpn/ta.key 0 # This file is secret
cipher AES-256-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /etc/openvpn/log/openvpn-status.log
log         /etc/openvpn/log/logopenvpn.log
verb 6
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256

client.ovpn:

key-direction 1
client
dev tap
dev-node OPENVPN01
proto udp
remote ***.ddns.net portnumber
resolv-retry infinite
nobind
persist-key
persist-tun
ca ./keyring01/ca.crt
cert ./keyring01/client02.crt
key ./keyring01/client02.key
remote-cert-tls server
tls-auth ./keyring01/ta.key 1
cipher AES-256-CBC
comp-lzo
verb 6
tls-cpher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256

Log from server(verb 6):
https://dl.dropboxusercontent.com/u/1201829/openvpn/logopenvpn_verb6.log

No log on the client side.

Traffic

jagdtigger wroteNo log on the client side

Why not ?

jagdtigger wroteServer.conf:
Code:
local 192.168.1.101
<snip>
server-bridge 192.168.1.0 255.255.255.0 192.168.1.110 192.168.1.120

From the HOWTO:
http://openvpn.net/index.php/open-source/documentation/miscellaneous/ethernet-bridging.html

HOWTO wroteserver-bridge 192.168.8.4 255.255.255.0 192.168.8.128 192.168.8.254

jagdtigger

Fixed that one, still cant connect. As for the missing i dont know, all it throws is a windows saying that it cant connect, when i click on show log the notepad says that the file do not exist....

Traffic

Client is windows ?

Using the OpenVPN-GUI on W7/8/10 etc ..

Being logged in as administrator is not sufficient for OpenVPN to work.
You must select OpenvpnGUI.exe and <right-click>:"Run As Administrator" ..

This is a security measure imposed by Microsoft not OpenVPN.

jagdtigger

I think its not necessary to do that any more, in my case after install when a started the GUI it asked for admin rights on its own.

Traffic

Once again .. details you have not provided:

Client OS
OpenVPN version

If the client log file is not created then you have either:

An installation issue
A privileges issue

Try starting OpenVPN like so:

C:\Program Files\OpenVPN\Config>openvpn --config filename.ovpn

jagdtigger

Client os: win 8.1
OpenVPN: 2.3.10

And the above command throwed an error:

Traffic

At least you can now see the error:

Cannot load certificate file C:\Program Files\OpenVPN\Config\Keyring01\client02.crt ..... no start line ..... etc

jagdtigger

What the heck?! The file is empty :S . It was generated on a good and stable PC.... I make an another set and report back.

/EDIT
Okay now it works, but i had to comment out the tls-cipher option at the end of the config files. The log said that there is no common cipher...

Traffic

jagdtigger wroteThe log said that there is no common cipher...

due to:

jagdtigger wroteServer.conf:
Code:
<snip>
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256

jagdtigger wroteThe file is empty :S

Disc error ?

jagdtigger wrote I make an another set

You do not have a master backup ?

jagdtigger wroteand report back

Let us know .. thanks 8-)

jagdtigger

Traffic wrotedue to:

That line is the same on both sides(i corrected the typo in the client config earlier)...

Traffic wroteYou do not have a master backup ?

Probably, but my Archive is a real mess so it was simpler to make an another set since im the only one who uses it.

Traffic

jagdtigger wroteProbably, but my Archive is a real mess so

true dat 😃

jagdtigger wroteThat line is the same on both sides

This does not necessarily work .. it is something the devs are hoping to improve.

jagdtigger

If thats the case then i have to deal with it i guess... 😃 It turned out that i slipped on a basic thing, again.... :oops:

Thanks for the help 🙂 .