farlandan
Let me just start with an assertion that I'm still trying to build my working knowledge of linux systems. I'm the lone IT guy for a decent sized Head Start/preschool/child advocacy center and was tasked with finding a way for employees to work from home during the pandemic.
So, after a lot of trial and error I managed to get an openVPN connection setup so that it connects to our center automatically when they log into their laptops. That worked great until last friday when apparently the one-year expiration that I didn't think anything about when I setup the server (didn't think we'd need this for more than a year...) made the CA and client licenses expire.
So after screwing up trying to sign certifications with previous certifications I just went through and started over, but didn't generate a new DH, making new certs that matched the names of the previous ones so I didn't need to change the .ovpn file and making sure the signature was for ten years instead of one. I transferred the new files to the config folder on a client laptop that had previously configured and working on the system, overwriting the previous ones from the last year.
The VPN connected fine and I thought that would be the end of it, but for some reason none of the laptops that connect using these new client config files have a good connection to the server. it's sporadic, they'll won't ping for a long time, then ping good for about ten seconds then, there's no reply for another five minutes. I haven't made any changes to the firewall, and the new CA and client files have TLS entries as well. I just can't figure out what the hell is going on.
300000
If you can make a connection so there is nothing wrong with new certificate and in fact it is corrected create and working now. The only trouble is how your dns server work and networking have some trouble. Maybe firewall or dns server sime time not working . Try correcting it before doing something else.