Regardless of the settings, there is never any feedback in the Status=> OpenVPN sectiopn....no errors, no data... as if it is not even trying to execute the client... Wondering if I'm missing some step to start the client?
The actual files in DDWRT directory are: ca.crt; client.crt; client.key; credentials; openvpn.conf; route-down.sh; route-up.sh; static.key; ta.key. Maybe some of these files need to be edited beyond the GUI?
Below are 3 large sections:
1. The available fields in DDWRT
2. OVPN file
3. My settings
==================
The available fields in DDWRT
1. Start OpenVPN Client <Enable/ Disable>
2. CVE-2019-14899 Mitigation <Enable/ Disable>
3. Server IP/Name
4. Port
5. Tunnel Device <TUN/TAP>
6. Tunnel Protocol <UDP/TCP>
7. Encryption Cipher <8 options/ None>
8. Hash Algorithim <None/MD4/MD5/SH1/SHA256/SHA512>
9. First Data Cipher <7 options/ None/Not set>
10. Second Data Cipher <7 options/Not set>
11. Third Data Cipher <7 options/Not set>
12. User Pass Authentication <Enable/ Disable>
13. User Name
14. Password
15. Advanced Options <Enable/ Disable>
16. TLS Chipher <8 options/ None>
17. Compression <Yes/Adaptive/No/Compress/Compress lz4/Compress lz42/Disabled>
18. NAT <Enable/ Disable>
19. Inbound Firewall on TUN <Check>
20. IP Address
21. Subnet Mask
22. Tunnel MTU Setting <1500>
23. Tunnel UDP Fragment
24. Tunnel UDP MSS-Fix <Enable/ Disable>
25. Verify Server Cert. <Check>
26. TLS Key choice <TLS Crypt/ TLS Auth>
27. TLS Key
28. Additional Config
29. Policy based Routing
30. PKCS12 Key
31. Static Key
32. CA Cert
33. Public Client Cert
34. Private Client Key
=======================================
OVPN Config File
auth-user-pass
auth-nocache
dhcp-option DNS 52.40.179.18
client
dev tun
proto udp
compress
remote tsrvwest02-a.bytz.io 466
#remote tsrvwest02-b.bytz.io 993
#remote tsrvwest02-c.bytz.io 993
#remote tsrvwest02-d.bytz.io 993
#remote tsrvwest02-aa.bytz.io 993
#remote tsrvwest02-bb.bytz.io 993
#remote tsrvwest02-cc.bytz.io 993
#remote tsrvwest02-dd.bytz.io 993
remote-random
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
;tls-auth ta.key 1
key-direction 1
cipher AES-128-CBC
auth SHA256
# Set log file verbosity.
verb 3
# Silence repeating messages
;mute 20
<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>
<cert>
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, ST=CA, L=LosAngeles, O=BytzVPN, CN=BytzVPN CA/name=server/emailAddress=
rob@brax.me
Validity
Not Before: Jan 22 01:01:50 2019 GMT
Not After : Jan 19 01:01:50 2029 GMT
Subject: C=US, ST=CA, L=LosAngeles, O=BytzVPN, CN=client1/name=server/emailAddress=
rob@brax.me
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:bb:c6:76:cd:79:7b:e8:ca:3b:00:0a:8f:f5:e6:
1c:fe:4b:a8:ee:34:90:60:3e:6b:cc:45:de:73:6d:
ab:1a:30:58:65:3d:ef:b5:18:fd:10:6e:5e:37:46:
bf:7c:22:29:6c:f9:7c:25:f3:b9:ee:48:ae:f7:93:
5f:0a:c3:ee:f9:09:67:55:cc:93:9f:bb:c4:f0:63:
25:85:9e:f4:73:a4:21:76:48:97:4c:d8:60:56:55:
e9:7b:cf:25:dc:3d:44:c0:6d:e5:f3:22:f0:53:1a:
33:56:e7:b8:2d:bb:c0:29:96:87:83:f3:c9:27:67:
7e:ea:a3:f9:7b:5c:2c:fc:fb:52:d4:9b:2e:18:f9:
e0:c0:b6:1d:f4:ed:4d:32:0e:48:26:00:84:b9:25:
02:ef:f4:88:2e:59:e8:19:51:51:2a:53:07:f0:b1:
1f:fe:3d:c8:67:c8:9a:7a:91:c9:ec:a2:25:97:8a:
f0:48:33:5d:bf:20:46:0a:61:93:de:fd:a7:54:fc:
80:b7:6d:41:3a:bf:a5:0c:9a:ff:e4:c1:75:ae:7e:
2e:a8:62:98:d5:f4:91:d1:30:8f:69:43:7f:2e:16:
4c:c7:8d:ff:9d:29:dd:56:35:63:4d:a3:b9:7f:c2:
fc:a1:eb:c8:54:09:33:0b:08:db:a3:d4:7b:79:4e:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
Netscape Comment:
Easy-RSA Generated Certificate
X509v3 Subject Key Identifier:
3F:C6:C7:F8:9D:54:94:78:09:60:70:B1:BA:F6:50:44:CE:25:0B:BE
X509v3 Authority Key Identifier:
keyid:C7:82:72:B1:B5:85:0A:7C:33:EE:F0:B7:E8:F2:6E:6F:1E:66:72:1F
DirName:/C=US/ST=CA/L=LosAngeles/O=BytzVPN/CN=BytzVPN CA/name=server/emailAddress=
rob@brax.me
serial:C7:17:E7:6B:7A:6E:0D:C6
X509v3 Extended Key Usage:
TLS Web Client Authentication
X509v3 Key Usage:
Digital Signature
X509v3 Subject Alternative Name:
DNS:client1
Signature Algorithm: sha256WithRSAEncryption
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
-----END OpenVPN Static key V1-----
</tls-auth>
================================
My Settings
1. Start OpenVPN Client <Enable>
2. CVE-2019-14899 Mitigation <Disable>
3. Server IP/Name <tsrvwest02-a.bytz.io>
4. Port <466>
5. Tunnel Device <TUN>
6. Tunnel Protocol <UDP>
7. Encryption Cipher <AES-128-CBC>
8. Hash Algorithim <SHA256>
9. First Data Cipher <AES-256-CBC>
10. Second Data Cipher <Not set>
11. Third Data Cipher <Not set>
12. User Pass Authentication <Enable>
13. User Name <myusername>
14. Password <mypassword>
15. Advanced Options <Enable>
16. TLS Chipher <TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384>
17. Compression <Compress lz4>
18. NAT <Disable>
19. Inbound Firewall on TUN <UnChecked>
20. IP Address <blank>
21. Subnet Mask <blank>
22. Tunnel MTU Setting <1500>
23. Tunnel UDP Fragment <blank>
24. Tunnel UDP MSS-Fix <Disable>
25. Verify Server Cert. <UnChecked>
26. TLS Key choice <TLS Auth>
27. TLS Key
-----BEGIN OpenVPN Static key V1-----
895be1a6c2531f2ddf5ffbfcb1e5cf91
-----END OpenVPN Static key V1-----
28. Additional Config
auth-user-pass
auth-nocache
dhcp-option DNS 52.40.179.18
client
dev tun
proto udp
compress
remote tsrvwest02-a.bytz.io 466
#remote tsrvwest02-b.bytz.io 993
#remote tsrvwest02-c.bytz.io 993
#remote tsrvwest02-d.bytz.io 993
#remote tsrvwest02-aa.bytz.io 993
#remote tsrvwest02-bb.bytz.io 993
#remote tsrvwest02-cc.bytz.io 993
#remote tsrvwest02-dd.bytz.io 993
remote-random
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
;tls-auth ta.key 1
key-direction 1
cipher AES-128-CBC
auth SHA256
# Set log file verbosity.
verb 3
# Silence repeating messages
;mute 20
29. Policy based Routing <blank>
30. PKCS12 Key <blank>
31. Static Key
32. CA Cert
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
33. Public Client Cert
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
34. Private Client Key
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
