Client-side .ovpn config issue-- basically nothing is recognized

rachel

So as far as I know the openvpn service on my centos 7 vps is running splendidly after following this. Unfortunately, when it came time to set up a windows 10 client, things got a bit difficult.

I tried running the server.ovpn with this:

laptop
dev tun
proto udp
remote n.n.n.n 1194
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo
verb 3
ca D:\Windows Directories\Documents\Documents\Keys\VPN\ca.crt
cert D:\Windows Directories\Documents\Documents\Keys\VPN\laptop.crt
key D:\Windows Directories\Documents\Documents\Keys\VPN\laptop.key

I get various "Options error: Unrecognized option or missing or extra parameter(s)" errors:
line 1 "laptop" is unrecognized. Line 11 "ca D:\Windows Directories\Documents\Documents\Keys\VPN\ca.crt" throws two errors: one for the use of "\" instead of "/" and one which completely rejects "ca" option. Similarly, lines 12 and 13 throw errors for "cert" and "key" respectively.

Removing these lines gives an error: "Sun Mar 26 19:52:17 2017 disabling NCP mode (--ncp-disable) because not in P2MP client or server mode
Options error: On Windows, --ifconfig is required when --dev tun is used"

Fine.... I have no idea what sort of options that would need, but let's throw it in there:

dev tun
ifconfig
proto udp
remote n.n.n.n 1194
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo
verb 3

"Options error: Unrecognized option or missing or extra parameter(s) in D:\Windows Directories\Desktop\client.ovpn:2: ifconfig (2.4.1)"

Great...

Somebody please help.

TiTex

why did you put 'laptop' in your config ?
'client' and 'server' are actual configuration parameters

also remove the key,ca,cert parameters and just use the inline versions https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage#lbAV
you can open/edit the crt & key files using notepad2 or notepad++ https://xhmikosr.github.io/notepad2-mod/

rachel

TiTex wrotewhy did you put 'laptop' in your config ?

My reading of the instructions told me to put that line as the name for the key I put in the server. Making your suggested changes:

client
dev tun
proto udp
remote n.n.n.n 1194
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo
verb 3
<ca>
D:\Windows Directories\Documents\Documents\Keys\VPN\ca.crt
</ca>
<cert>
D:\Windows Directories\Documents\Documents\Keys\VPN\laptop.crt
</cert>
<key>
D:\Windows Directories\Documents\Documents\Keys\VPN\laptop.key
</key>

Now I'm getting this error:

WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
OpenSSL: error:0906D06C:PEM routines:PEM_read_bio:no start line
OpenSSL: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib
Cannot load inline certificate file
Exiting due to fatal error

TinCanTech

rachel wroteClient-side .ovpn config issue-- basically nothing is recognized

Yes .. Nothing is recognised if you deliberately will not read the documentation.

Example:

rachel wroteOpenSSL: error:0906D06C:PEM routines:PEM_read_bio:no start line
OpenSSL: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib
Cannot load inline certificate file

Because:

rachel wrote<cert>
D:\Windows Directories\Documents\Documents\Keys\VPN\laptop.crt
</cert>

Nobody, except you, has ever done this before .. Nobody !

This is self explanatory:

rachel wroteWARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info

See http://openvpn.net/howto.html#mitm for more info ..

rachel wroteafter following this

Obviously that tutorial is not suitable for you .. please read the entire Openvpn HOWTO:
https://openvpn.net/index.php/open-source/documentation/howto.html

Good luck 😃

rachel

TinCanTech wroteNobody, except you, has ever done this before .. Nobody !

If nothing else, your post prompted me to re-visit the previous suggestion and paste the contents of the files into the respective <option> brackets.

Almost fired up to go here. Now I'm getting a "read UDP: Connection reset by peer (WSAECONNRESET) (code=10054)"

Firewall should be open on both ends. Client windows machine has the firewall turned off...

-significant amount of time elapses-

Looks like I can't run openvpn. The service is failing to start up due to "Job for openvpn@server.service failed because a configured resource limit was exceeded".

Yes. I've searched through the documentation as well as searched through google. No applicable results.

I was kinda afraid of that happening since my VPS is small. 128mb RAM.

Unless y'all have suggestions, I think this is the end of the line.

TinCanTech

rachel wroteLooks like I can't run openvpn. The service is failing to start up due to "Job for openvpn@server.service failed because a configured resource limit was exceeded". <snip>
I was kinda afraid of that happening since my VPS is small. 128mb RAM.

I was going to suggest using the compile time switch --enable-small .. unfortunately, this will not help in your case.

See: https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg03628.html

Try disabling other services that you don't need so often ..

Of course, you have not provided any suitable details of your server.

Please see:
HOWTO: Request Help !