Hi,
a few weeks ago I managed to install PiVPN together with PiHole on my RPI. I am able to connect to my VPN from Windows 10 and iOS and everything works just fine. However, today I tried to connect to my VPN from my newly installed Debian system.
I installed OpenVPN and used the command "openvpn --config clientname.ovpn" afterwards.
I get following output:
Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
TCP/UDP: Preserving recently used remote address: [AF_INET]97.228.161.73:1239
Socket Buffers: R=[212992->212992] S=[212992->212992]
UDP link local: (not bound)
UDP link remote: [AF_INET]97.228.161.73:1239
TLS: Initial packet from [AF_INET]97.228.161.73:1239, sid=b8012ab1 b8536666
VERIFY OK: depth=1, CN=ChangeMe
VERIFY KU OK
Validating certificate extended key usage
++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
VERIFY EKU OK
VERIFY X509NAME OK: CN=raspberrypi_74514b44-49be-4436-8fa9-29418ea3aa25
VERIFY OK: depth=0, CN=raspberrypi_74514b44-49be-4436-8fa9-29418ea3aa25
Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 256 bit EC, curve: prime256v1
[raspberrypi_74514b44-49be-4436-8fa9-29418ea3aa25] Peer Connection Initiated with [AF_INET]94.217.141.73:1329
SENT CONTROL [raspberrypi_74514b44-49be-4436-8fa9-29418ea3aa25]: 'PUSH_REQUEST' (status=1)
PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 192.168.2.119,block-outside-dns,redirect-gateway def1,route-gateway 10.8.0.1,topology subnet,ping 1800,ping-restart 3600,ifconfig 10.8.0.5 255.255.255.0,peer-id 0,cipher AES-256-CBC'
Options error: Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:2: block-outside-dns (2.4.7)
OPTIONS IMPORT: timers and/or timeouts modified
OPTIONS IMPORT: --ifconfig/up options modified
OPTIONS IMPORT: route options modified
OPTIONS IMPORT: route-related options modified
OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
OPTIONS IMPORT: peer-id set
OPTIONS IMPORT: adjusting link_mtu to 1624
OPTIONS IMPORT: data channel crypto options modified
Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Outgoing Data Channel: Using 256 bit message hash 'SHA256' for HMAC authentication
Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Incoming Data Channel: Using 256 bit message hash 'SHA256' for HMAC authentication
ROUTE_GATEWAY 192.168.2.1/255.255.255.0 IFACE=enp27s0 HWADDR=30:9c:23:da:fe:4d
TUN/TAP device tun1 opened
TUN/TAP TX queue length set to 100
/sbin/ip link set dev tun1 up mtu 1500
/sbin/ip addr add dev tun1 10.8.0.5/24 broadcast 10.8.0.255
/sbin/ip route add 97.228.161.73/32 via 192.168.2.1
/sbin/ip route add 0.0.0.0/1 via 10.8.0.1
/sbin/ip route add 128.0.0.0/1 via 10.8.0.1
Initialization Sequence Completed
The Terminal Process just keeps going on and on without doing anything. I still have internet connection but itś not connected to my VPN..
I hope that someone can help me out. It should not be that difficult since the server is already running and validated but my Linux client just wont connect..
My Cerfiticate i get from PiVPN is following:
client
dev tun
proto udp
remote domainxyz.net 1239
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
tls-version-min 1.2
verify-x509-name raspberrypi_74514b44-49be-4436-8fa9-29418ea3aa25 name
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 3
<ca>
-----BEGIN CERTIFICATE-----
MIdsfagsdfgJNKFSHHJdsfjbK(...)yAsdfdge
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
MADSFddf32gIIB(...)65dBADFSDr
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----
MqwerweqIHj(...)basdfgrgk=
-----END ENCRYPTED PRIVATE KEY-----
</key>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
eewrf24578(...)qwerfas&/9012384
Thank you!
