Hi
im a noob to this but here goes (if this is in the wrong lace im sorry and pleas move or delee if needed)
i have added the openvpn debug at the end of this post.
I have setup pivpn on my raspberry pi, which seemed to have worked fine. I have downloaded the openvpn GUI on my windows laptop and the gui is connected to the rapberry pi.
But if i google whats my ip i get the same ip show up if vpn is on laptop or not. do i need to do anything else? am i missing something or is it not working properly?.
Once you have installed openvnc on the pi and installed the openvpn gui on windows and connected it is that all you need to do, or do you need to ue special urls or anything to route through the raspberry pi running the openvpn?
thank you from a confused noob lol.
If you would like any more info please ask.
Nook6
pi@raspberrypi:~ $ pivpn -d
::: Generating Debug Output
:::: PiVPN debug ::::
=============================================
:::: Latest commit ::::
commit f045e3935d12e1eb714fa0f630b021209e926aef
Author: Orazio <orazioedoardo@users.noreply.github.com>
Date: Mon Mar 23 08:48:19 2020 +0100
Merge pull request #991 from rayden84/typo-fix
Update install.sh
=============================================
:::: Installation settings ::::
PLAT=Raspbian
OSCN=buster
USING_UFW=0
IPv4dev=wlan0
dhcpReserv=1
IPv4addr=192.168.1.243/24
IPv4gw=192.168.1.254
install_user=<username> #<-- username of pi user
install_home=/home/pi
VPN=openvpn
pivpnPROTO=udp
pivpnPORT=1194
pivpnDNS1=208.67.222.222
pivpnDNS2=208.67.220.220
pivpnSEARCHDOMAIN=REDACTED
pivpnHOST=REDACTED
TWO_POINT_FOUR=1
pivpnENCRYPT=256
USE_PREDEFINED_DH_PARAM=0
INPUT_CHAIN_EDITED=0
FORWARD_CHAIN_EDITED=0
pivpnDEV=tun0
pivpnNET=10.8.0.0
subnetClass=24
UNATTUPG=1
INSTALLED_PACKAGES=()
HELP_SHOWN=1
=============================================
:::: Server configuration shown below ::::
dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/pki/ca.crt
cert /etc/openvpn/easy-rsa/pki/issued/raspberrypi_<UUID>.crt
key /etc/openvpn/easy-rsa/pki/private/raspberrypi_<UUID>.key
dh none
ecdh-curve prime256v1
topology subnet
server 10.8.0.0 255.255.255.0
# Set your primary domain name server address for clients
push "dhcp-option DOMAIN <myweb>.dynu.net"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
# Prevent DNS leaks on Windows
push "block-outside-dns"
# Override the Client default gateway by using 0.0.0.0/1 and
# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of
# overriding but not wiping out the original default gateway.
push "redirect-gateway def1"
client-to-client
client-config-dir /etc/openvpn/ccd
keepalive 15 120
remote-cert-tls client
tls-version-min 1.2
tls-crypt /etc/openvpn/easy-rsa/pki/ta.key
cipher AES-256-CBC
auth SHA256
user openvpn
group openvpn
persist-key
persist-tun
crl-verify /etc/openvpn/crl.pem
status /var/log/openvpn-status.log 20
status-version 3
syslog
verb 3
#DuplicateCNs allow access control on a less-granular, per user basis.
#Remove # if you will manage access by user instead of device.
#duplicate-cn
# Generated for use by PiVPN.io
=============================================
:::: Client template file shown below ::::
client
dev tun
proto udp
remote REDACTED 1194
resolv-retry infinite
nobind
remote-cert-tls server
tls-version-min 1.2
verify-x509-name raspberrypi_<UUID>c name
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 3
=============================================
:::: Recursive list of files in ::::
::: /etc/openvpn/easy-rsa/pki shows below :::
/etc/openvpn/easy-rsa/pki/:
ca.crt
crl.pem
Default.txt
ecparams
extensions.temp
index.txt
index.txt.attr
index.txt.attr.old
index.txt.old
issued
<MINE>.ovpn
openssl-easyrsa.cnf
private
renewed
revoked
safessl-easyrsa.cnf
serial
serial.old
ta.key
/etc/openvpn/easy-rsa/pki/ecparams:
prime256v1.pem
/etc/openvpn/easy-rsa/pki/issued:
nook6.crt
raspberrypi_<UUID>.crt
/etc/openvpn/easy-rsa/pki/private:
ca.key
nook6.key
raspberrypi_<UUID>.key
/etc/openvpn/easy-rsa/pki/renewed:
private_by_serial
reqs_by_serial
/etc/openvpn/easy-rsa/pki/renewed/private_by_serial:
/etc/openvpn/easy-rsa/pki/renewed/reqs_by_serial:
/etc/openvpn/easy-rsa/pki/revoked:
private_by_serial
reqs_by_serial
/etc/openvpn/easy-rsa/pki/revoked/private_by_serial:
/etc/openvpn/easy-rsa/pki/revoked/reqs_by_serial:
=============================================
:::: Self check ::::
:: [OK] IP forwarding is enabled
:: [OK] Iptables MASQUERADE rule set
:: [OK] OpenVPN is running
:: [OK] OpenVPN is enabled (it will automatically start on reboot)
:: [OK] OpenVPN is listening on port 1194/udp
=============================================
:::: Having trouble connecting? Take a look at the FAQ:
:::: https://github.com/pivpn/pivpn/wiki/FAQ
=============================================
:::: Snippet of the server log ::::
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 TLS: soft reset sec=0 bytes=6504424/-1 pkts=18233/0
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 VERIFY OK: depth=1, CN=ChangeMe
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 VERIFY KU OK
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 Validating certificate extended key usage
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 VERIFY EKU OK
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 VERIFY OK: depth=0, CN=nook6
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 peer info: IV_VER=2.4.8
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 peer info: IV_PLAT=win
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 peer info: IV_PROTO=2
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 peer info: IV_LZ4=1
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 peer info: IV_LZ4v2=1
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 peer info: IV_LZO=1
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 peer info: IV_COMP_STUB=1
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 peer info: IV_COMP_STUBv2=1
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 peer info: IV_TCPNL=1
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 peer info: IV_GUI_VER=OpenVPN_GUI_11
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mar 24 08:42:19 raspberrypi ovpn-server[344]: nook6/REDACTED:54711 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384, 256 bit EC, curve: prime256v1
=============================================
:::: Debug complete ::::
:::
::: Debug output completed above.
::: Copy saved to /tmp/debug.txt
:::
