Ovpn windows 7 easy-rsa and ssl

pinguim007

hello,

Do somebody known if the windows 7 (ovpn) support easy-rsa certificates?

The only connection I can do is with openssl.

the only problem is when I upgrade the debian version, after I configure the openssl.cnf, when I try to generate the crt I receive a error saying that did not found the directory certs.

All the foruns is tellig to configure the dir, certificate and private_key parameter.

how can I do this without configurating it?

thanks anyway
pinguim007

janjust

Yes, you can generate certs on Debian/Linux and use them on Windows.
Did you read the HOWTO? modify the 'vars' file (on linux) , then run

. ./vars
./clean-all
./build-key client

the second command will clear out all existing keys but it will also set up a new index.txt and serial file.

pinguim007

hi,

I was trying to use openssl.

when I try to use easy-rsa on a linux server to a .ovpn client, the configuration I am doing do not work.
do you have a very simple configuration for a windows 7 laptop and a linux server.
I think what I am doing is not supported for the driver.

I just dont known What can I do on ovpn windows 7. can you help me?

pinguim007

janjust

for a simple config I'd recommend to read the HOWTO.
what do you mean 'it does not work' ? what happens when you launch the client? can you post your current config files, and connection logs for both client and server.

pinguim007

sure,

thank you for helping me i will post tomorrow morning on my work time.

pinguim007

hello friend,

I am using now easy-rsa to create .crt .key and .ca

Client .ovpn

client
dev tun
proto tcp
remote ip-or-hostname-of-your-openvpn-server 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert foo1.crt
key foo1.key
comp-lzo
verb 3

server .conf

port 1194
proto tcp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 172.16.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
user nobody
group users
persist-key
persist-tun
status openvpn-status.log
verb 3
client-to-client

thanks for your contact.
pinguim007

maikcat

hi there,

your configs look ok

please post server/client logs as well...

Michael.

pinguim007

my conf has changed to udp port 5000

My Server door udp 5000 is closed.
no logs on the server.

My client log is:

Cannot load certificate file foo1.crt: error:02001002:system library:fopen:No such file or directory: error:20074002:BIO routines:FILE_CTRL:system lib: error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib

pinguim007

and I am receiving this.

No server certificate verification method

maikcat

hi there

>Cannot load certificate file foo1.crt:

i believe the system cannot find foo1.crt file
try using absolute path names inside ovpn files and try again.

Michael

pinguim007

hi,

Thanks for your answer, but I have tryied too, and no sucess.

pinguim007

pinguim007

the second tunnel I am establishing is not getting up when i ifconfig.

and I am receiving a message on kern.log saying tun0 Disabled Privacy Extensions:

what is it?

can somebody help me?