EDIT: added more verbose logs Hi, I'm trying to make an OpenVPN setup with Elliptic Curves cryptography and SHA-512 on Linux Debian. This seems to be very hard! :( if and when I will manage to get the whole thing up and running I will write a detailed howto, so any help is appreciated! First of all: yes, I've recompiled OpenVPN using the latest OpenSSL version (see below). My suspect is that I made some mistake in the certificate generation process but I can't find it. [b]Summary:[/b] Configuration files What I did What I get What I get (more verbose) [b]Configuration files:[/b] My server.conf file (note that, as a beginning, I'm using the "dh" directive, also because I don't know an equivalent directive for using ECDH... maybe "ecdh"? But ok, that's a secondary issue): [code] local xxx.xxx.xxx.xxx port 1194 proto udp dev tun ca /etc/openvpn/cacert.pem cert /etc/openvpn/servercert.pem key /etc/openvpn/private/serverkey.pem dh /etc/openvpn/dh.pem server 10.83.50.0 255.255.255.0 client-to-client keepalive 10 120 cipher AES-256-CBC comp-lzo yes max-clients 10 user nobody group nogroup persist-key persist-tun status openvpn-status.log log openvpn.log verb 3 mute 20 [/code] My client conf file: [code] client remote xxx.xxx.xxx.xxx 1194 mute-replay-warnings ca /home/user/.ssl/cacert.pem cert /home/user/.ssl/clientcert.pem key /home/user/.ssl/private/clientkey.pem cipher AES-256-CBC comp-lzo yes dev tun proto udp nobind auth-nocache script-security 2 persist-key persist-tun mute 5 [/code] [b]What I did:[/b] 1) downloaded OpenSSL 1.0.0, configured and installed in /usr/local/openssl (to avoid removing the already installed openssl 0.9.8 which looks like it's a crucial packet for everything on my system). I am calling the new openssl version with the "openssl-new" alias 2) downloaded and installed the latest version of liblzo 3) downloaded latest OpenVPN version, configured with: [code] ./configure --enable-pthread --with-ssl-headers=/usr/local/openssl/include --with-ssl-lib=/usr/local/openssl/lib --enable-iproute2 [/code] 4) verified that OpenVPN does actually support EC crypto and SHA-512 with: [code] openvpn --show-tls openvpn --show-ciphers openvpn --show-digests [/code] 5) created a CA: [code] openssl-new ecparam -out private/cakey_temp.pem -name sect571k1 -text -genkey openssl-new ec -in private/cakey_temp.pem -out private/cakey.pem -aes256 wipe -f private/cakey_temp.pem openssl-new req -new -x509 -out cacert.pem -key private/cakey.pem -days 36500 -sha512 -extensions v3_ca openssl-new x509 -text -in cacert.pem [/code] with the last command I read: Signature Algorithm: ecdsa-with-SHA512 6) created a server key and certification request: [code] openssl-new req -nodes -sha512 -newkey ec:cacert.pem -new -days 36500 -out req.pem chmod 600 privkey.pem mv privkey.pem private/serverkey.pem openssl-new req -in req.pem -text -verify -noout [/code] again, I read: Signature Algorithm: ecdsa-with-SHA512 7) modified openssl.cnf accordingly and signed the request with the CA: [code] openssl-new ca -config openssl.cnf -policy policy_anything -out servercert.pem -md sha512 -cert cacert.pem -keyfile private/cakey.pem -infiles req.pem rm req.pem [/code] 8) created a client key and certification request: [code] openssl-new req -nodes -sha512 -newkey ec:cacert.pem -new -days 36500 -out req.pem chmod 600 privkey.pem mv privkey.pem private/clientkey.pem [/code] 9) signed the request with the CA: [code] openssl-new ca -config openssl.cnf -policy policy_anything -out clientcert.pem -md sha512 -cert cacert.pem -keyfile private/cakey.pem -infiles req.pem [/code] (I later moved client files in ~/.ssl ) 10) created both ECDH and DH (for testing) parameters: [code] openssl-new ecparam -out ecdh.pem -name sect571k1 openssl-new dhparam -out dh.pem 4096 [/code] 11) started server: [code] openvpn /etc/openvpn/server.conf [/code] 12) started client: [code] openvpn /etc/openvpn/server.conf [/code] [b]What I get:[/b] server: [code] Tue Jul 5 08:54:20 2011 OpenVPN 2.2.0 i686-pc-linux-gnu [SSL] [LZO2] [EPOLL] [eurephia] built on Jul 4 2011 Tue Jul 5 08:54:21 2011 Diffie-Hellman initialized with 4096 bit key Tue Jul 5 08:54:21 2011 TLS-Auth MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ] Tue Jul 5 08:54:21 2011 Socket Buffers: R=[112640->131072] S=[112640->131072] Tue Jul 5 08:54:21 2011 ROUTE default_gateway=xxx.xxx.xxx.xxx Tue Jul 5 08:54:21 2011 TUN/TAP device tun0 opened Tue Jul 5 08:54:21 2011 TUN/TAP TX queue length set to 100 Tue Jul 5 08:54:21 2011 /bin/ip link set dev tun0 up mtu 1500 Tue Jul 5 08:54:21 2011 /bin/ip addr add dev tun0 local 10.83.50.1 peer 10.83.50.2 Tue Jul 5 08:54:21 2011 /bin/ip route add 10.83.50.0/24 via 10.83.50.2 Tue Jul 5 08:54:21 2011 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ] Tue Jul 5 08:54:21 2011 GID set to nogroup Tue Jul 5 08:54:21 2011 UID set to nobody Tue Jul 5 08:54:21 2011 UDPv4 link local (bound): xxx.xxx.xxx.xxx:1194 Tue Jul 5 08:54:21 2011 UDPv4 link remote: [undef] Tue Jul 5 08:54:21 2011 MULTI: multi_init called, r=256 v=256 Tue Jul 5 08:54:21 2011 IFCONFIG POOL: base=10.83.50.4 size=62 Tue Jul 5 08:54:21 2011 Initialization Sequence Completed Tue Jul 5 08:54:51 2011 MULTI: multi_create_instance called Tue Jul 5 08:54:51 2011 yyy.yyy.yyy.yyy:49451 Re-using SSL/TLS context Tue Jul 5 08:54:51 2011 yyy.yyy.yyy.yyy:49451 LZO compression initialized Tue Jul 5 08:54:51 2011 yyy.yyy.yyy.yyy:49451 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ] Tue Jul 5 08:54:51 2011 yyy.yyy.yyy.yyy:49451 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ] Tue Jul 5 08:54:51 2011 yyy.yyy.yyy.yyy:49451 Local Options hash (VER=V4): 'a8f55717' Tue Jul 5 08:54:51 2011 yyy.yyy.yyy.yyy:49451 Expected Remote Options hash (VER=V4): '22188c5b' Tue Jul 5 08:54:51 2011 yyy.yyy.yyy.yyy:49451 TLS: Initial packet from 82.55.186.28:49451, sid=682d8b97 4974a96b Tue Jul 5 08:54:51 2011 yyy.yyy.yyy.yyy:49451 TLS_ERROR: BIO read tls_read_plaintext error: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher Tue Jul 5 08:54:51 2011 yyy.yyy.yyy.yyy:49451 TLS Error: TLS object -> incoming plaintext read error Tue Jul 5 08:54:51 2011 yyy.yyy.yyy.yyy:49451 TLS Error: TLS handshake failed Tue Jul 5 08:54:51 2011 yyy.yyy.yyy.yyy:49451 SIGUSR1[soft,tls-error] received, client-instance restarting [/code] client: [code] Tue Jul 5 10:54:51 2011 OpenVPN 2.2.0 i686-pc-linux-gnu [SSL] [LZO2] [EPOLL] [eurephia] built on Jul 4 2011 Tue Jul 5 10:54:51 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Tue Jul 5 10:54:51 2011 LZO compression initialized Tue Jul 5 10:54:51 2011 UDPv4 link local: [undef] Tue Jul 5 10:54:51 2011 UDPv4 link remote: xxx.xxx.xxx.xxx:1194 [/code] and then it hangs. [b]What I get (more verbose):[/b] server: [code] Tue Jul 5 10:13:57 2011 us=69174 Current Parameter Settings: Tue Jul 5 10:13:57 2011 us=69226 config = '/etc/openvpn/server.conf' Tue Jul 5 10:13:57 2011 us=69243 mode = 1 Tue Jul 5 10:13:57 2011 us=69257 persist_config = DISABLED Tue Jul 5 10:13:57 2011 us=69271 persist_mode = 1 Tue Jul 5 10:13:57 2011 us=69285 show_ciphers = DISABLED Tue Jul 5 10:13:57 2011 us=69293 show_digests = DISABLED Tue Jul 5 10:13:57 2011 us=69301 show_engines = DISABLED Tue Jul 5 10:13:57 2011 us=69309 genkey = DISABLED Tue Jul 5 10:13:57 2011 us=69319 key_pass_file = '[UNDEF]' Tue Jul 5 10:13:57 2011 us=69334 show_tls_ciphers = DISABLED Tue Jul 5 10:13:57 2011 us=69348 Connection profiles [default]: Tue Jul 5 10:13:57 2011 us=69358 proto = udp Tue Jul 5 10:13:57 2011 us=69367 local = 'xxx.xxx.xxx.xxx' Tue Jul 5 10:13:57 2011 us=69376 local_port = 1194 Tue Jul 5 10:13:57 2011 us=69384 remote = '[UNDEF]' Tue Jul 5 10:13:57 2011 us=69392 remote_port = 1194 Tue Jul 5 10:13:57 2011 us=69400 remote_float = DISABLED Tue Jul 5 10:13:57 2011 us=69408 bind_defined = DISABLED Tue Jul 5 10:13:57 2011 us=69416 bind_local = ENABLED Tue Jul 5 10:13:57 2011 us=69423 NOTE: --mute triggered... Tue Jul 5 10:13:57 2011 us=69442 196 variation(s) on previous 20 message(s) suppressed by --mute Tue Jul 5 10:13:57 2011 us=69453 OpenVPN 2.2.0 i686-pc-linux-gnu [SSL] [LZO2] [EPOLL] [eurephia] built on Jul 4 2011 Tue Jul 5 10:13:57 2011 us=69549 GDG: route[1] rrr.rrr.rrr.rrr/255.255.255.128/0.0.0.0 m=0 Tue Jul 5 10:13:57 2011 us=69571 GDG: route[2] 0.0.0.0/0.0.0.0/sss.sss.sss.sss m=0 Tue Jul 5 10:13:57 2011 us=69596 GDG: best=sss.sss.sss.sss[2] lm=0 Tue Jul 5 10:13:57 2011 us=69616 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Tue Jul 5 10:13:57 2011 us=288192 Diffie-Hellman initialized with 4096 bit key Tue Jul 5 10:13:57 2011 us=288906 PRNG init md=SHA1 size=36 Tue Jul 5 10:13:57 2011 us=288943 MTU DYNAMIC mtu=0, flags=1, 0 -> 138 Tue Jul 5 10:13:57 2011 us=288955 TLS-Auth MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ] Tue Jul 5 10:13:57 2011 us=288964 MTU DYNAMIC mtu=1450, flags=2, 1558 -> 1450 Tue Jul 5 10:13:57 2011 us=288997 Socket Buffers: R=[112640->131072] S=[112640->131072] Tue Jul 5 10:13:57 2011 us=289078 GDG: route[1] rrr.rrr.rrr.rrr/255.255.255.128/0.0.0.0 m=0 Tue Jul 5 10:13:57 2011 us=289094 GDG: route[2] 0.0.0.0/0.0.0.0/sss.sss.sss.sss m=0 Tue Jul 5 10:13:57 2011 us=289113 GDG: best=sss.sss.sss.sss[2] lm=0 Tue Jul 5 10:13:57 2011 us=289157 GDG: route[1] rrr.rrr.rrr.rrr/255.255.255.128/0.0.0.0 m=0 Tue Jul 5 10:13:57 2011 us=289171 GDG: route[2] 0.0.0.0/0.0.0.0/sss.sss.sss.sss m=0 Tue Jul 5 10:13:57 2011 us=289189 GDG: best=sss.sss.sss.sss[2] lm=0 Tue Jul 5 10:13:57 2011 us=289203 ROUTE default_gateway=sss.sss.sss.sss Tue Jul 5 10:13:57 2011 us=289993 TUN/TAP device tun0 opened Tue Jul 5 10:13:57 2011 us=290022 TUN/TAP TX queue length set to 100 Tue Jul 5 10:13:57 2011 us=290109 /bin/ip link set dev tun0 up mtu 1500 Tue Jul 5 10:13:57 2011 us=291088 /bin/ip addr add dev tun0 local 10.83.50.1 peer 10.83.50.2 Tue Jul 5 10:13:57 2011 us=291917 GDG: route[1] 10.83.50.2/255.255.255.255/0.0.0.0 m=0 Tue Jul 5 10:13:57 2011 us=291943 GDG: route[2] rrr.rrr.rrr.rrr/255.255.255.128/0.0.0.0 m=0 Tue Jul 5 10:13:57 2011 us=291957 GDG: route[3] 0.0.0.0/0.0.0.0/sss.sss.sss.sss m=0 Tue Jul 5 10:13:57 2011 us=291976 GDG: best=sss.sss.sss.sss[3] lm=0 Tue Jul 5 10:13:57 2011 us=291998 /bin/ip route add 10.83.50.0/24 via 10.83.50.2 Tue Jul 5 10:13:57 2011 us=292594 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ] Tue Jul 5 10:13:57 2011 us=292908 GID set to nogroup Tue Jul 5 10:13:57 2011 us=292929 UID set to nobody Tue Jul 5 10:13:57 2011 us=292945 UDPv4 link local (bound): xxx.xxx.xxx.xxx:1194 Tue Jul 5 10:13:57 2011 us=292954 UDPv4 link remote: [undef] Tue Jul 5 10:13:57 2011 us=292969 MULTI: multi_init called, r=256 v=256 Tue Jul 5 10:13:57 2011 us=292992 IFCONFIG POOL: base=10.83.50.4 size=62 Tue Jul 5 10:13:57 2011 us=293012 Initialization Sequence Completed Tue Jul 5 10:14:06 2011 us=326521 MULTI: REAP range 0 -> 16 Tue Jul 5 10:14:06 2011 us=326713 MULTI: multi_create_instance called Tue Jul 5 10:14:06 2011 us=326755 yyy.yyy.yyy.yyy:43686 Re-using SSL/TLS context Tue Jul 5 10:14:06 2011 us=326790 yyy.yyy.yyy.yyy:43686 LZO compression initialized Tue Jul 5 10:14:06 2011 us=326805 yyy.yyy.yyy.yyy:43686 MTU DYNAMIC mtu=0, flags=1, 0 -> 138 Tue Jul 5 10:14:06 2011 us=326839 yyy.yyy.yyy.yyy:43686 PID packet_id_init seq_backtrack=64 time_backtrack=15 Tue Jul 5 10:14:06 2011 us=326920 yyy.yyy.yyy.yyy:43686 PID packet_id_init seq_backtrack=64 time_backtrack=15 Tue Jul 5 10:14:06 2011 us=326937 yyy.yyy.yyy.yyy:43686 PID packet_id_init seq_backtrack=64 time_backtrack=15 Tue Jul 5 10:14:06 2011 us=326988 yyy.yyy.yyy.yyy:43686 PID packet_id_init seq_backtrack=64 time_backtrack=15 Tue Jul 5 10:14:06 2011 us=327010 yyy.yyy.yyy.yyy:43686 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ] Tue Jul 5 10:14:06 2011 us=327020 yyy.yyy.yyy.yyy:43686 MTU DYNAMIC mtu=1450, flags=2, 1558 -> 1450 Tue Jul 5 10:14:06 2011 us=327037 yyy.yyy.yyy.yyy:43686 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ] Tue Jul 5 10:14:06 2011 us=327078 yyy.yyy.yyy.yyy:43686 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server' Tue Jul 5 10:14:06 2011 us=327089 yyy.yyy.yyy.yyy:43686 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client' Tue Jul 5 10:14:06 2011 us=327107 yyy.yyy.yyy.yyy:43686 Local Options hash (VER=V4): 'a8f55717' Tue Jul 5 10:14:06 2011 us=327120 yyy.yyy.yyy.yyy:43686 Expected Remote Options hash (VER=V4): '22188c5b' Tue Jul 5 10:14:06 2011 us=327139 yyy.yyy.yyy.yyy:43686 SENT PING Tue Jul 5 10:14:06 2011 us=327177 yyy.yyy.yyy.yyy:43686 GET INST BY REAL: yyy.yyy.yyy.yyy:43686 [created] Tue Jul 5 10:14:06 2011 us=327207 yyy.yyy.yyy.yyy:43686 UDPv4 READ [14] from yyy.yyy.yyy.yyy:43686: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0 Tue Jul 5 10:14:06 2011 us=327231 yyy.yyy.yyy.yyy:43686 TLS: Initial packet from yyy.yyy.yyy.yyy:43686, sid=ed695907 8263a92e Tue Jul 5 10:14:06 2011 us=327265 yyy.yyy.yyy.yyy:43686 UDPv4 WRITE [26] to yyy.yyy.yyy.yyy:43686: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0 Tue Jul 5 10:14:06 2011 us=422946 GET INST BY REAL: yyy.yyy.yyy.yyy:43686 [succeeded] Tue Jul 5 10:14:06 2011 us=422990 yyy.yyy.yyy.yyy:43686 UDPv4 READ [22] from yyy.yyy.yyy.yyy:43686: P_ACK_V1 kid=0 [ 0 ] Tue Jul 5 10:14:06 2011 us=424466 GET INST BY REAL: yyy.yyy.yyy.yyy:43686 [succeeded] Tue Jul 5 10:14:06 2011 us=424501 yyy.yyy.yyy.yyy:43686 UDPv4 READ [114] from yyy.yyy.yyy.yyy:43686: P_CONTROL_V1 kid=0 [ ] pid=1 DATA len=100 Tue Jul 5 10:14:06 2011 us=424559 yyy.yyy.yyy.yyy:43686 UDPv4 WRITE [22] to yyy.yyy.yyy.yyy:43686: P_ACK_V1 kid=0 [ 1 ] Tue Jul 5 10:14:06 2011 us=426226 GET INST BY REAL: yyy.yyy.yyy.yyy:43686 [succeeded] Tue Jul 5 10:14:06 2011 us=426277 yyy.yyy.yyy.yyy:43686 UDPv4 READ [114] from yyy.yyy.yyy.yyy:43686: P_CONTROL_V1 kid=0 [ ] pid=2 DATA len=100 Tue Jul 5 10:14:06 2011 us=426330 yyy.yyy.yyy.yyy:43686 UDPv4 WRITE [22] to yyy.yyy.yyy.yyy:43686: P_ACK_V1 kid=0 [ 2 ] Tue Jul 5 10:14:06 2011 us=427473 GET INST BY REAL: yyy.yyy.yyy.yyy:43686 [succeeded] Tue Jul 5 10:14:06 2011 us=427500 yyy.yyy.yyy.yyy:43686 UDPv4 READ [24] from yyy.yyy.yyy.yyy:43686: P_CONTROL_V1 kid=0 [ ] pid=3 DATA len=10 Tue Jul 5 10:14:06 2011 us=427709 yyy.yyy.yyy.yyy:43686 TLS_ERROR: BIO read tls_read_plaintext error: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher Tue Jul 5 10:14:06 2011 us=427735 yyy.yyy.yyy.yyy:43686 TLS Error: TLS object -> incoming plaintext read error Tue Jul 5 10:14:06 2011 us=427748 yyy.yyy.yyy.yyy:43686 TLS Error: TLS handshake failed Tue Jul 5 10:14:06 2011 us=427757 yyy.yyy.yyy.yyy:43686 PID packet_id_free Tue Jul 5 10:14:06 2011 us=427785 yyy.yyy.yyy.yyy:43686 PID packet_id_free Tue Jul 5 10:14:06 2011 us=427795 yyy.yyy.yyy.yyy:43686 PID packet_id_free Tue Jul 5 10:14:06 2011 us=427806 yyy.yyy.yyy.yyy:43686 PID packet_id_init seq_backtrack=64 time_backtrack=15 Tue Jul 5 10:14:06 2011 us=427833 yyy.yyy.yyy.yyy:43686 PID packet_id_init seq_backtrack=64 time_backtrack=15 Tue Jul 5 10:14:06 2011 us=427858 yyy.yyy.yyy.yyy:43686 SIGUSR1[soft,tls-error] received, client-instance restarting Tue Jul 5 10:14:06 2011 us=427877 MULTI: multi_close_instance called Tue Jul 5 10:14:06 2011 us=427915 PID packet_id_free Tue Jul 5 10:14:06 2011 us=427942 PID packet_id_free Tue Jul 5 10:14:06 2011 us=427958 PID packet_id_free Tue Jul 5 10:14:06 2011 us=427972 PID packet_id_free Tue Jul 5 10:14:06 2011 us=427995 PID packet_id_free Tue Jul 5 10:14:06 2011 us=428012 PID packet_id_free Tue Jul 5 10:14:06 2011 us=428027 PID packet_id_free Tue Jul 5 10:14:06 2011 us=428040 PID packet_id_free Tue Jul 5 10:14:06 2011 us=428049 PID packet_id_free Tue Jul 5 10:14:11 2011 us=65540 MULTI: REAP range 16 -> 32 Tue Jul 5 10:14:11 2011 us=65625 TLS State Error: No TLS state for client yyy.yyy.yyy.yyy:43686, opcode=4 Tue Jul 5 10:14:11 2011 us=65659 GET INST BY REAL: yyy.yyy.yyy.yyy:43686 [failed] Tue Jul 5 10:14:15 2011 us=609472 MULTI: REAP range 32 -> 48 Tue Jul 5 10:14:15 2011 us=609548 TLS State Error: No TLS state for client yyy.yyy.yyy.yyy:43686, opcode=4 Tue Jul 5 10:14:15 2011 us=609619 GET INST BY REAL: yyy.yyy.yyy.yyy:43686 [failed] Tue Jul 5 10:14:23 2011 us=257248 MULTI: REAP range 48 -> 64 Tue Jul 5 10:14:23 2011 us=257327 TLS State Error: No TLS state for client yyy.yyy.yyy.yyy:43686, opcode=4 Tue Jul 5 10:14:23 2011 us=257345 GET INST BY REAL: yyy.yyy.yyy.yyy:43686 [failed] Tue Jul 5 10:14:33 2011 us=267364 MULTI: REAP range 64 -> 80 Tue Jul 5 10:14:39 2011 us=838883 NOTE: --mute triggered... [/code] client: [code] Tue Jul 5 12:14:06 2011 us=275560 Current Parameter Settings: Tue Jul 5 12:14:06 2011 us=275710 config = 'client.conf' Tue Jul 5 12:14:06 2011 us=275746 mode = 0 Tue Jul 5 12:14:06 2011 us=275776 persist_config = DISABLED Tue Jul 5 12:14:06 2011 us=275806 persist_mode = 1 Tue Jul 5 12:14:06 2011 us=275834 NOTE: --mute triggered... Tue Jul 5 12:14:06 2011 us=275888 206 variation(s) on previous 5 message(s) suppressed by --mute Tue Jul 5 12:14:06 2011 us=275927 OpenVPN 2.2.0 i686-pc-linux-gnu [SSL] [LZO2] [EPOLL] [eurephia] built on Jul 4 2011 Tue Jul 5 12:14:06 2011 us=276067 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Tue Jul 5 12:14:06 2011 us=276102 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Tue Jul 5 12:14:06 2011 us=278956 PRNG init md=SHA1 size=36 Tue Jul 5 12:14:06 2011 us=279041 LZO compression initialized Tue Jul 5 12:14:06 2011 us=279088 MTU DYNAMIC mtu=0, flags=1, 0 -> 138 Tue Jul 5 12:14:06 2011 us=279129 PID packet_id_init seq_backtrack=64 time_backtrack=15 Tue Jul 5 12:14:06 2011 us=279231 PID packet_id_init seq_backtrack=64 time_backtrack=15 Tue Jul 5 12:14:06 2011 us=279270 PID packet_id_init seq_backtrack=64 time_backtrack=15 Tue Jul 5 12:14:06 2011 us=280395 PID packet_id_init seq_backtrack=64 time_backtrack=15 Tue Jul 5 12:14:06 2011 us=280448 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ] Tue Jul 5 12:14:06 2011 us=280498 MTU DYNAMIC mtu=1450, flags=2, 1558 -> 1450 Tue Jul 5 12:14:06 2011 us=280576 Socket Buffers: R=[112640->131072] S=[112640->131072] Tue Jul 5 12:14:06 2011 us=280636 RESOLVE_REMOTE flags=0x0101 phase=1 rrs=0 sig=-1 status=1 Tue Jul 5 12:14:06 2011 us=280675 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ] Tue Jul 5 12:14:06 2011 us=280732 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client' Tue Jul 5 12:14:06 2011 us=280764 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server' Tue Jul 5 12:14:06 2011 us=280825 Local Options hash (VER=V4): '22188c5b' Tue Jul 5 12:14:06 2011 us=280873 Expected Remote Options hash (VER=V4): 'a8f55717' Tue Jul 5 12:14:06 2011 us=280923 UDPv4 link local: [undef] Tue Jul 5 12:14:06 2011 us=280971 UDPv4 link remote: xxx.xxx.xxx.xxx:1194 Tue Jul 5 12:14:06 2011 us=281086 UDPv4 WRITE [14] to xxx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0 Tue Jul 5 12:14:06 2011 us=377574 UDPv4 READ [26] from xxx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0 Tue Jul 5 12:14:06 2011 us=377672 TLS: Initial packet from xxx.xxx.xxx.xxx:1194, sid=b9a10ff8 81c84327 Tue Jul 5 12:14:06 2011 us=377792 UDPv4 WRITE [22] to xxx.xxx.xxx.xxx:1194: P_ACK_V1 kid=0 [ 0 ] Tue Jul 5 12:14:06 2011 us=377945 UDPv4 WRITE [114] to xxx.xxx.xxx.xxx:1194: P_CONTROL_V1 kid=0 [ ] pid=1 DATA len=100 Tue Jul 5 12:14:06 2011 us=378048 UDPv4 WRITE [114] to xxx.xxx.xxx.xxx:1194: P_CONTROL_V1 kid=0 [ ] pid=2 DATA len=100 Tue Jul 5 12:14:06 2011 us=378176 UDPv4 WRITE [24] to xxx.xxx.xxx.xxx:1194: P_CONTROL_V1 kid=0 [ ] pid=3 DATA len=10 Tue Jul 5 12:14:06 2011 us=474822 UDPv4 READ [22] from xxx.xxx.xxx.xxx:1194: P_ACK_V1 kid=0 [ 1 ] Tue Jul 5 12:14:06 2011 us=475936 NOTE: --mute triggered... [/code] Any idea? Please help, I'm really in need of this ._. I will write a complete and detailed howto as a small compensation for the community!

I can't believe nobody ever tried OpenVPN with elliptic curves crypto °_°

as it seems some members of the forum are in vacation (maybe). i personally havent tried elliptic curves... wait for other members to come back (krzee,janjust) maybe they help you. Michael.

OK thanks, I'll wait :) (I'll just up this thread every now and then). I think this would be a really interesting issue to address, since there is a lot of interest in EC crypto for critical applications.

UP, still needing an EC setup with openvpn...

interesting setup - let me try to reproduce and I will get back to you once I know more. there's a good chance that OpenVPN simply does not support this - the support for "untested" ciphers is pretty bad.

OpenVPN Elliptic Curves (SHA512, ECDSA, ECDH, Linux, Debian)

theovandoesburg

Hate to interrupt this post, but I had a questions for "janjust."

May I ask how you generated the EC certificates/keys that you posted (i.e., the specific openssl commands)?

Would really appreciate it! Thank you.

I've been enjoying the progression of this post!

yyy

@theovandoesburg
I created those certs using XCA (http://xca.sourceforge.net), it is a GUI program, which uses openssl. It supports only sha1 for ecc, though.

janjust

@theovandoesburg: I created my ECDA certs using the steps provided by 'gaglia' on the first page of this post:

openssl ecparam -out cakey_temp.pem -name sect571k1 -text -genkey
openssl ec -in cakey_temp.pem -out ec-ca.key -aes256
openssl req -new -x509 -out ec-ca.crt -key ec-ca.key -days 36500 -sha512 -extensions v3_ca

# server
openssl req -nodes -sha512 -newkey ec:ec-ca.crt -new -days 36500 -out req.pem -keyout ec-server.key
chmod 600 ec-server.key
openssl x509 -req -extfile openssl.cnf -out ec-server.crt -sha512 -CA ec-ca.crt -CAkey ec-ca.key -in req.pem -set_serial $RANDOM
#client
openssl req -nodes -sha512 -newkey ec:ec-ca.crt -new -days 36500 -out req.pem -keyout ec-client.key
chmod 600 ec-client.key
openssl x509 -req -extfile openssl.cnf -out ec-client.crt -sha512 -CA ec-ca.crt -CAkey ec-ca.key -in req.pem -set_serial $RANDOM

janjust

with the following hack to OpenVPN's ssl.c code:

--- ssl.c       2011-06-24 08:13:39.000000000 +0200
+++ /home/janjust/src/openvpn-2.2.1/ssl.c       2011-09-08 00:04:37.000000000 +0200
@@ -1588,6 +1588,7 @@
   DH *dh;
   BIO *bio;
   bool using_cert_file = false;
+  EC_KEY *ecdh=NULL;
 
   ERR_clear_error ();
 
@@ -1622,6 +1623,16 @@
       msg (D_TLS_DEBUG_LOW, "Diffie-Hellman initialized with %d bit key",
           8 * DH_size (dh));
       DH_free (dh);
+
+      ecdh = EC_KEY_new_by_curve_name(NID_secp224r1);
+
+      if (ecdh == NULL)
+          msg (M_SSLERR, "Unable to create curve (NID_secp224r1)");
+
+      if (!SSL_CTX_set_tmp_ecdh(ctx, ecdh))
+          msg (M_SSLERR, "SSL_CTX_set_tmp_ecdh");
+
+      EC_KEY_free(ecdh);
     }
   else                         /* if client */
     {

I can use the ecdsa-with-SHA512 signed certificates ; the 'no shared cipher' message is gone and the TLS control channel is now encrypted using

Sep  8 12:49:57 2011 us=360534 X.X.X.X:60345 Control Channel: TLSv1, cipher TLSv1/SSLv3 ECDHE-ECDSA-AES256-SHA

I am not sure how to test whether the data channel , which uses a separate cipher and digest (signing) algorithm, is also signed using ECDSA enabled keys.

gaglia

This is great, at this point I'm wondering if it could be worthwhile to wait for an "official" support in openssl and openvpn stable code or apply the hack directly.

Thanks both to shenson and janjust for your help!

theovandoesburg

I concur. Such a great help. Meant to convey my appreciation earlier. Everything now seems to work!

janjust

my elliptic curve patch will be cleaned up (and made configurable) and will be entered as an official patch; I am not sure in which version of openvpn it will be included , however.

also, I'm not convinced yet if this covers everything - somebody will need to come up with a test to show that the data channel is now also protected using EC-derived keys.

gaglia

The patch seems to work, thanks 🙂 but it seemst that it's not been included yet in the latest stable, nor in the latest snapshots. Are there any news fromt hat point of view? Also, if I understand correctly, this enables ECDSA with SHA2 for authentication only, but for encryption OpenVPN still uses DH (with the "dh" directive). Is ECDH planned?

rumble

Jan if you have new versions of your patch can you please post them until they are included in OpenVPN?

gaglia

up ^^

gaglia

Well, in the meantime I wrote a draft of what I did, you can find it at www.gagliardoni.net , comments are welcome ^^

janjust

I've just submitted the patch for inclusing in the upcoming 2.3 release; with this patch you can select an elliptic curve to support ECDSA+SHA512 signed certs. The usage will be something like:

--show-curves

and

--ecdh prime256v1

brianwood67

If you want to configure a VPN connection from a Windows XP client computer you only need what comes with the Operating System itself, it's all built right in. To set up a connection to a VPN, do the following:

1. On the computer that is running Windows XP, confirm that the connection to the Internet is correctly configured.

* You can try to browse the internet
* Ping a known host on the Internet, like yahoo.com, something that isn’t blocking ICMP

2. Click Start, and then click Control Panel.

gaglia

Wrong thread?

gaglia

Hi, is there any news about the EC fix? Is it currently included in the 2.2.3 alpha? I confirm that it is NOT included in the 2.2.2 stable.

@ JunJust: thanks for the great job, do you have any other info about how the EC crypto in OpenVPN works? Namely: is it possible to use ECDH for OpenVPN key exchange with the new patch, and if so, how? Could it be possible to post the current version of the patch (if it is not already included in the 2.2.3)?

Regarding your doubt about whether the data channel is also encrypted using EC, I think I've got the answer: no. In my howto at gagliardoni.net I explained how to setup EC *authentication* with OpenVPN (by using ECDSA), but I still use classic DH for key exchange, because at this point OpenVpn doesn't support any directive for ECDH. So the authentication is done with EC crypto, but key exchange is done using classic DH: I suppose this is for both data and control channel. I have no idea how to make ECDH work on OpenVPN, but hopefully you know the answer? 🙂

I really find it's weird that so few people are concerned about EC crypto in OpenVPN o.O

gaglia

Bump?

(extra characters added)

gaglia

Up 🙂

C'mon guys, EC crypto is c00000l 😛

janjust

my ECDSA patch was not included in 2.3.1 but it added certificate support only; there is very little interest in EC crypto with OpenVPN - esp as EC crypto is not included by some distro's (RedHat) and I am also unsure about the support for it in PolarSSL (which the iOS/Android clients use).

I will see if I can resubmit my ECDSA cert support patch, but this is only for the certificates - it is NOT full-blown elliptic curve support, as openvpn uses a non-standard way of deriving the data channel keys.

gaglia

Thanks for the reply and sorry for the spam posts 🙂 I figured that one in a month or so just to bump the post couldn't be too harmful 😛

Anyway, what you say is quite sad 🙁 especially since there could be a good performance boost (quite useful for mobile apps). Please keep us updated and thanks again 🙂

janjust

there would only be a slight performance boost during key negotiation; encryption is done using AES256 which is just as fast with RSA/DH keys.

« Previous Page Next Page »