george Nothing except for the windows 7 specific configuration parameters. A .ovpn file is still a client config file.
pinguim007 Hello george thanks for your answer but it still works on xp and the 7 don't what are the differences between the the parameter on xp and what is the necessary on 7?
pinguim007 Hello again I think it is a route problem, but why it works on xp? What should I do different on 7? If somebody can help with that information can you post something.
george Put this in your client config: route-method exe route-delay 2 This should get the routes pushed from the openvpn server.
pinguim007 thanks for people from MO, hello george and others, I am having this problem. my server conf (linux) is... port 2222 proto udp dev tun ca /etc/openvpn/ca.crt cert /etc/openvpn/server.crt key /etc/openvpn/server.key dh /etc/openvpn/dh1024.pem server 192.168.100.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "route 192.168.0.0 255.255.255.0" keepalive 10 120 comp-lzo max-clients 1 user nobody persist-key persist-tun status /var/log/openvpnstatus.log log /var/log/openvpn.log log-append /var/log/openvpn.log verb 7 script-security 2 and my client ovpn is client dev tun proto udp remote X.X.X.X 2222 resolv-retry infinite nobind persist-key persist-tun ca ca.crt cert guilherme.crt key guilherme.key ns-cert-type server comp-lzo verb 3 route-method exe route-delay 2 and my log is... TLS: Initial packet from X.X.X.X:2222, sid=b43a4649 868be231 Wed Dec 22 03:01:27 2010 VERIFY ERROR: depth=0, error=unsupported certificate purpose: /C=BR/ST=SP/L=SaoPaulo/O=softwarelivre/CN=server Wed Dec 22 03:01:27 2010 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed Wed Dec 22 03:01:27 2010 TLS Error: TLS object -> incoming plaintext read error Wed Dec 22 03:01:27 2010 TLS Error: TLS handshake failed Wed Dec 22 03:01:27 2010 TCP/UDP: Closing socket Wed Dec 22 03:01:27 2010 SIGUSR1[soft,tls-error] received, process restarting Wed Dec 22 03:01:27 2010 Restart pause, 2 second(s) Wed Dec 22 03:01:29 2010 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Wed Dec 22 03:01:29 2010 Re-using SSL/TLS context Wed Dec 22 03:01:29 2010 LZO compression initialized Wed Dec 22 03:01:29 2010 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ] Wed Dec 22 03:01:29 2010 Socket Buffers: R=[8192->8192] S=[8192->8192] Wed Dec 22 03:01:29 2010 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Wed Dec 22 03:01:29 2010 Local Options hash (VER=V4): '41690919' Wed Dec 22 03:01:29 2010 Expected Remote Options hash (VER=V4): '530fdded' Wed Dec 22 03:01:29 2010 UDPv4 link local: [undef] Wed Dec 22 03:01:29 2010 UDPv4 link remote: X.X.X.X:2222
george Here's your problem, (at least the one to fix first). Wed Dec 22 03:01:27 2010 VERIFY ERROR: depth=0, error=unsupported certificate purpose: /C=BR/ST=SP/L=SaoPaulo/O=softwarelivre/CN=server Refer to this howto for more information on certificate setup: http://openvpn.net/index.php/open-source/documentation/howto.html#pki
pinguim007 thanks george it worked I was sending the build-key-server to the clients instead of build-key
