Server version: OpenVPN 2.4.0 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Dec 27 2016
Client version: any 2.3.*
Server log:
Options error: --tls-auth and --tls-crypt are mutually exclusive
Use --help for more information.
Server config:
local <my_ip>
port 443
proto udp
ifconfig-pool-persist /home/myvpn/temp/udp_443/ipp.txt
status /dev/null
log /dev/null
dev tun
ca /home/myvpn/config/ca_servers.crt
dh /home/myvpn/data/dh.pem
cert /home/myvpn/data/server.crt
key /home/myvpn/data/server.key
cipher AES-256-CBC
topology subnet
server 10.2.0.0 255.255.0.0
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 10.2.0.1"
push "comp-lzo no"
tls-auth /home/myvpn/config/ta.key 0
tls-crypt /home/myvpn/config/ta.key
keepalive 10 60
comp-lzo no
user nobody
group nogroup
persist-key
persist-tun
verb 3
management localhost 7804
tmp-dir /dev/shm
script-security 2
mode server
client-connect /home/myvpn/connect.sh
client-disconnect /home/myvpn/disconnect.sh
tls-verify /home/myvpn/tls_verify.sh
fast-io
persist-local-ip
persist-remote-ip
Client config:
client
dev tun
proto tcp
remote <omissis> 443
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
cipher AES-256-CBC
comp-lzo no
verb 3
rcvbuf 262144
sndbuf 262144
<tls-auth>omissis</tls-auth>
key-direction 1
<ca>omissis</ca>
<cert>omissis</cert>
<key>omissis</key>
Sorry, my fault.
Unfortunately i don't find the 'Edit' button of the first post.
Anyone can move this topic in
Configuration subforum? thanks.
