Hi there,
as the title says my OpenVPN server is not receiving any connections.
I've installed OpenVPN via the privpn script. (Reinstall; it worked before)
Platform: Raspberry Pi 3 B
#/var/log/openvpn.log
May 29 23:36:47 pi ovpn-server[2494]: /sbin/ip addr add dev tun0 10.8.0.1/24 broadcast 10.8.0.255
May 29 23:36:47 pi ovpn-server[2494]: Could not determine IPv4/IPv6 protocol. Using AF_INET
May 29 23:36:47 pi ovpn-server[2494]: Socket Buffers: R=[163840->163840] S=[163840->163840]
May 29 23:36:47 pi ovpn-server[2494]: UDPv4 link local (bound): [AF_INET][undef]:443
May 29 23:36:47 pi ovpn-server[2494]: UDPv4 link remote: [AF_UNSPEC]
May 29 23:36:47 pi ovpn-server[2494]: GID set to nogroup
May 29 23:36:47 pi ovpn-server[2494]: UID set to nobody
May 29 23:36:47 pi ovpn-server[2494]: MULTI: multi_init called, r=256 v=256
May 29 23:36:47 pi ovpn-server[2494]: IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
May 29 23:36:47 pi ovpn-server[2494]: Initialization Sequence Completed
#/etc/openvpn/server.conf
dev tun
proto udp
port 443
ca /etc/openvpn/easy-rsa/pki/ca.crt
cert /etc/openvpn/easy-rsa/pki/issued/server_ksFmPWFNiqUmZQNM.crt
key /etc/openvpn/easy-rsa/pki/private/server_ksFmPWFNiqUmZQNM.key
dh none
topology subnet
server 10.8.0.0 255.255.255.0
# Set your primary domain name server address for clients
push "dhcp-option DNS 1.1.1.1"
push "dhcp-option DNS 1.0.0.1"
# Prevent DNS leaks on Windows
push "block-outside-dns"
# Override the Client default gateway by using 0.0.0.0/1 and
# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of
# overriding but not wiping out the original default gateway.
push "redirect-gateway def1"
client-to-client
keepalive 1800 3600
remote-cert-tls client
tls-version-min 1.2
tls-crypt /etc/openvpn/easy-rsa/pki/ta.key
cipher AES-256-CBC
auth SHA256
user nobody
group nogroup
persist-key
persist-tun
crl-verify /etc/openvpn/crl.pem
status /var/log/openvpn-status.log 20
status-version 3
syslog
verb 3
#DuplicateCNs allow access control on a less-granular, per user basis.
#Remove # if you will manage access by user instead of device.
#duplicate-cn
# Generated for use by PiVPN.io
#ovpn file
client
dev tun
proto udp
remote xxx 443
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
tls-version-min 1.2
verify-x509-name server_ksFmPWFNiqUmZQNM name
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 3
<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----
-----END ENCRYPTED PRIVATE KEY-----
</key>
<tls-crypt>
As you can see, it looks like everything is working, however all connections are simply ignored by the server. (No log messages or response)
I am running a Pi-Hole on the same machine, if that makes a difference.
Thanks in advance! 🙂
