Hi all, I have installed my OpenVPN server on Arch Linux and it seems to work properly, I can connect it from a OpenVPN client on Windows 10. Unfortunately I cannot get my Android OpenVPN connect working. My server configuration is: port 1194 proto udp dev tun tls-server ca /etc/openvpn/server/ca.crt cert /etc/openvpn/server/timserver.crt key /etc/openvpn/server/timserver.key dh /etc/openvpn/server/dh.pem topology subnet keepalive 10 120 tls-crypt /etc/openvpn/server/ta.key cipher AES-256-CBC user nobody group nobody persist-key persist-tun status openvpn-status.log verb 3 explicit-exit-notify 1 pull auth-user-pass the android OpenVPN client configuration is: client dev tun proto udp remote 192.168.0.13 1194 resolv-retry infinite nobind persist-key persist-tun ping 15 ping-restart 0 reneg-sec 0 remote-cert-tls server auth-user-pass verb 3 cipher AES-256-CBC auth SHA1 ifconfig 192.168.0.9 192.168.0.10 ... key-direction 1 ... ... ... The log on the android device (I tried many types of devices and various android versions, from 4.x to the last one ...) says something like that: ... 13:48:21.257 -- Sending PUSH_REQUEST to server... 13:48:21.273 -- OPTIONS: 0 [peer-id] [0] 1 [cipher] [AES-256-CBC] 13:48:21.274 -- PROTOCOL OPTIONS: cipher: AES-256-CBC digest: SHA1 compress: NONE peer ID: 0 13:48:21.278 -- EVENT: ASSIGN_IP 13:48:21.285 -- TUN Error: tun_prop_error: one of ifconfig or ifconfig-ipv6 must be specified 13:48:21.286 -- EVENT: TUN_SETUP_FAILED info='tun_prop_error: one of ifconfig or ifconfig-ipv6 must be specified' 13:48:21.291 -- EVENT: DISCONNECTED 13:48:21.295 -- Client exception in transport_recv: tun_exception: not connected 13:48:21.300 -- EVENT: CORE_THREAD_INACTIVE 13:48:21.301 -- Tunnel bytes per CPU second: 0 I tried with the ifconfing option both included and commented out but nothing changed. please, can anybody give me a hint? best regards, Bruno

OK .. I suggest you start with the howto. [url=http://openvpn.net/index.php/open-source/documentation/howto.html]HOWTO: For OpenVPN Community Edition[/url] [quote="Bruno Vignola" post_id=80112 time=1532355031 user_id=44632] Actually I tried: server 192.168.0.13 255.255.255.0 and it does not work [/quote]Check your log files for errors etc. In your case what you do not understand is that the VPN has it's own IP subnet, by default this is set to 10.8.0.0/24 in the [url=https://github.com/OpenVPN/openvpn/blob/master/sample/sample-config-files/server.conf]example server config[/url]. Do not use your server ethernet IP 192.168.0.13 as the parameter to --server. [quote="Bruno Vignola" post_id=80112 time=1532355031 user_id=44632] sorry I am a beginner with OpenVPN [/quote]We all were once upon a time .. just keep reading and learning. [quote="Bruno Vignola" post_id=80112 time=1532355031 user_id=44632] Omitting it, it is seems to work (at least, with the windows client) [/quote]No that does not work. Just start over with the example and read the comments in that file.

Problem with OpenVPN Connect

Bruno Vignola

Hi all,

I have installed my OpenVPN server on Arch Linux and it seems to work properly, I can connect it
from a OpenVPN client on Windows 10. Unfortunately I cannot get my Android OpenVPN connect
working. My server configuration is:

port 1194
proto udp
dev tun
tls-server
ca /etc/openvpn/server/ca.crt
cert /etc/openvpn/server/timserver.crt
key /etc/openvpn/server/timserver.key
dh /etc/openvpn/server/dh.pem
topology subnet
keepalive 10 120
tls-crypt /etc/openvpn/server/ta.key
cipher AES-256-CBC
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 1
pull
auth-user-pass

the android OpenVPN client configuration is:

client
dev tun
proto udp
remote 192.168.0.13 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ping 15
ping-restart 0
reneg-sec 0
remote-cert-tls server
auth-user-pass
verb 3
cipher AES-256-CBC
auth SHA1
ifconfig 192.168.0.9 192.168.0.10

<ca>
...
</ca>

key-direction 1
<tls-crypt>
...
</tls-crypt>

<cert>
...
</cert>

<key>
...
</key>

The log on the android device (I tried many types of devices and various android versions,
from 4.x to the last one ...) says something like that:

...
13:48:21.257 -- Sending PUSH_REQUEST to server...

13:48:21.273 -- OPTIONS:
0 [peer-id] [0]
1 [cipher] [AES-256-CBC]

13:48:21.274 -- PROTOCOL OPTIONS:
cipher: AES-256-CBC
digest: SHA1
compress: NONE
peer ID: 0

13:48:21.278 -- EVENT: ASSIGN_IP
13:48:21.285 -- TUN Error: tun_prop_error: one of ifconfig or ifconfig-ipv6 must be specified
13:48:21.286 -- EVENT: TUN_SETUP_FAILED info='tun_prop_error: one of ifconfig or ifconfig-ipv6 must be specified'
13:48:21.291 -- EVENT: DISCONNECTED
13:48:21.295 -- Client exception in transport_recv: tun_exception: not connected
13:48:21.300 -- EVENT: CORE_THREAD_INACTIVE
13:48:21.301 -- Tunnel bytes per CPU second: 0

I tried with the ifconfing option both included and commented out but nothing changed.

please, can anybody give me a hint?

best regards,

Bruno

TinCanTech

Why have you chosen to omit --server from your server config ?

Bruno Vignola

Actually I tried:

server 192.168.0.13 255.255.255.0

and it does not work ... (I am sorry I am a beginner with OpenVPN)
Omitting it, it is seems to work (at least, with the windows client)

TinCanTech

OK .. I suggest you start with the howto.
HOWTO: For OpenVPN Community Edition

Bruno Vignola wrote Actually I tried:

server 192.168.0.13 255.255.255.0

and it does not work

Check your log files for errors etc.

In your case what you do not understand is that the VPN has it's own IP subnet,
by default this is set to 10.8.0.0/24 in the example server config.

Do not use your server ethernet IP 192.168.0.13 as the parameter to --server.

Bruno Vignola wrote sorry I am a beginner with OpenVPN

We all were once upon a time .. just keep reading and learning.

Bruno Vignola wrote Omitting it, it is seems to work (at least, with the windows client)

No that does not work. Just start over with the example and read the comments in that file.

Bruno Vignola

thank you sir,

I understood a lot of things from your post, and everything work now (android too!)
thanks a lot!!

Bruno