hi,
i'm new! so be patient!
i have a pfsense server connected to my box adsl 82.xxx.xxx.xxx and a lan 192.168.0.1/24
i have 3 computers connected to this server through a switch
i have installed openvpn client and KVpnc to manage it on a Kali linux distribution
i have got a configuration file of openvpn from my server pfsense
when i try to connect i get this:
debug: New type: openvpn
debug: currect connection type: "4".
debug: New authtype: "cert".
debug: currect connection type: "4".
debug: New authtype: "cert".
debug: New profile: _home_Informatique_pfSense_pfSense-UDP4-1194-certificat-client-config
debug: New type: openvpn
debug: currect connection type: "4".
debug: New authtype: "cert".
debug: currect connection type: "4".
debug: New authtype: "cert".
debug: currect connection type: "4".
debug: New authtype: "cert".
info: Saving profile _home_Informatique_pfSense_pfSense-UDP4-1194-certificat-client-config...
error: Writing user password has failed.
error: Writing preshared key has failed.
error: Writing preshared key password has failed.
info: Profile "_home_Informatique_pfSense_pfSense-UDP4-1194-certificat-client-config" saved.
info: Profile _home_Informatique_pfSense_pfSense-UDP4-1194-certificat-client-config saved.
debug: openvpn: /usr/sbin/openvpn
debug: Loading of module "tun" was successful.
debug: Default interface: "wlan0".
debug: IP address of default interface: "10.41.165.168".
info: Trying to connect to server "192.168.1.254" with ...
debug: Setting DNS_UPDATE "NO".
debug: Starting Openvpn management handler...
debug: [openvpn] Wed Dec 12 12:45:24 2018 WARNING: Ignoring option 'dh' in tls-client mode, please only include this in your server configuration
debug: [openvpn] Wed Dec 12 12:45:24 2018 WARNING: Using --management on a TCP port WITHOUT passwords is STRONGLY discouraged and considered insecure
debug: [openvpn] Wed Dec 12 12:45:24 2018 WARNING: file '/root/.kde/share/apps/kvpnc/openvpn_privatekey__home_Informatique_pfSense_pfSense-UDP4-1194-certificat-client-config.pem' is group or others accessible
debug: [openvpn] Wed Dec 12 12:45:24 2018 WARNING: file '/root/.kde/share/apps/kvpnc/openvpn_tlsauth__home_Informatique_pfSense_pfSense-UDP4-1194-certificat-client-config.pem' is group or others accessible
debug: [openvpn] Wed Dec 12 12:45:24 2018 OpenVPN 2.4.6 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 30 2018
debug: [openvpn] Wed Dec 12 12:45:24 2018 library versions: OpenSSL 1.1.1a 20 Nov 2018, LZO 2.10
debug: [openvpn] Wed Dec 12 12:45:24 2018 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
debug: [openvpn] Wed Dec 12 12:45:24 2018 NOTE: starting with OpenVPN 2.1, '--script-security 2' or higher is required to call user-defined scripts or executables
debug: [openvpn] Wed Dec 12 12:45:24 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]192.168.1.254:1194
debug: [openvpn] Wed Dec 12 12:45:24 2018 Attempting to establish TCP connection with [AF_INET]192.168.1.254:1194 [nonblock]
debug: [openvpn]
debug: [openvpn] Wed Dec 12 12:47:24 2018 TCP: connect to [AF_INET]192.168.1.254:1194 failed: Connection timed out
error: Connection has been timed out. Terminate.
debug: There is a reason to stop connecting, terminating "openvpn" process.
debug: Disconnect requested
debug: Disconnect requested, status connecting
debug: Killing process while connecting.
success: Successful connect try canceled.
debug: Disconnected.
you can see i have some problems but i don'y know how to resolve them
i did't find --script-security 2
i don't understand : Ignoring option 'dh' in tls-client mode, please only include this in your server configuration
i thought all configuration was in my configuration file from pfsense server openvpn
can you help me please
regards
