Traffic wroteFull configs and logs please (remove personal info)
Server config:
port 1194
proto udp
dev tun
ca /etc/openvpn/certs/ca.crt
cert /etc/openvpn/certs/homeserver.crt
key /etc/openvpn/certs/homeserver.key
dh /etc/openvpn/certs/dh2048.pem
#tls-auth /etc/openvpn/certs/ta.key 0
server 192.168.88.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
client-to-client
keepalive 10 60
comp-lzo yes
max-clients 2
user nobody
group nobody
persist-key
persist-tun
log /var/log/openvpn.log
#status /var/log/openvpn-status.log
verb 4
mute 20
#client-config-dir ccd
#ccd-exclusive
Client config:
client
remote
ca /root/easy-rsa/keys/ca.crt
cert /root/easy-rsa/keys/kelsinni.crt
key /root/easy-rsa/keys/kelsinni.key
cipher DES-EDE3-CBC
comp-lzo yes
dev tun
proto udp
tls-auth /root/easy-rsa/keys/ta.key 1
nobind
auth-nocache
script-security 2
persist-key
persist-tun
user nobody
group nogroup
*.ovpn profile file imported to Openvpn Connect: (that was generated by Openvpn Android App after a sucefull connection with the server using
ca,
cert and
key files)
# Enables connection to GUI
management /data/data/de.blinkt.openvpn/cache/mgmtsocket unix
management-client
management-query-passwords
management-hold
setenv IV_GUI_VER "de.blinkt.openvpn 0.6.52"
setenv IV_PLAT_VER "21 5.0 armeabi-v7a lge MSM8974 LG-D855"
machine-readable-output
ifconfig-nowarn
client
verb 4
connect-retry-max 5
connect-retry 5
resolv-retry 60
dev tun
remote ***MyDNS*** 1194 udp
<ca>
-----BEGIN CERTIFICATE-----
MIIEV*******
********sFIEi6ap9c=
-----END CERTIFICATE-----
</ca>
<key>
-----BEGIN PRIVATE KEY-----
MIIEvgIBADANBg********
*********TPMhWgY5U
-----END PRIVATE KEY-----
</key>
<cert>
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=PT, ST=LX, L=LX, O=SV, OU=MY, CN=HOME/name=SERVER/emailAddress=MYEMAIL
Validity
Not Before: Apr 10 23:51:48 2016 GMT
Not After : Apr 8 23:51:48 2026 GMT
Subject: C=PT, ST=LX, L=LX, O=SV, OU=MY, CN=kelsinni/name=server/emailAddress=MYEMAIL
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:a6:******
*************
********6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
Netscape Comment:
Easy-RSA Generated Certificate
X509v3 Subject Key Identifier:
F0:A1:****************:F1:B8
X509v3 Authority Key Identifier:
keyid:E6:D6:***************:F4:73
DirName:/C=PT/ST=LX/L=LX/O=SV/OU=MY/CN=HOME/name=SERVER/emailAddress=MYEMAIL
serial:AA:********:A5
X509v3 Extended Key Usage:
TLS Web Client Authentication
X509v3 Key Usage:
Digital Signature
Signature Algorithm: sha256WithRSAEncryption
97:34:45:******
******************
*****99:0e:98:54
-----BEGIN CERTIFICATE-----
MIIEoD**********
******************
********xCZDphU
-----END CERTIFICATE-----
</cert>
comp-lzo
route 0.0.0.0 0.0.0.0 vpn_gateway
dhcp-option DNS 8.8.8.8
dhcp-option DNS 8.8.4.4
dhcp-option DOMAIN ***MyDNS***
The log of OpenVPN Connect is showed on my last post.
NOTE: with these server and client config with the 3 ca, cert and key files i can sucefully connect to my server using my smartphone with Openvpn android app.
My goal is to get a correct .ovpn profile so i can connect too with a Windows PC by OpenVPN GUI
Thanks again for all the help
