VPN client OPNsensse

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
b4unty
OpenVpn Newbie
Posts: 1
Joined: Mon Oct 22, 2018 11:58 am

VPN client OPNsensse

Post by b4unty » Mon Oct 22, 2018 12:05 pm

Hi, I have an openvpn file that works fine on my iPhone. Now I want to build the connection via Open Sense but always get the server down? I have followed these instructions https://forum.opnsense.org/index.php?to ... 1#msg19771 can only imagine that I have in the consideration of which part of the config which is a mistake. Can anybody help me further ? If you still lack information, I will happily write it.

Code: Select all

client
proto udp
remote 89.XXX.XXX.XXX 1194
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name server_dESx9325gbq5ivvU name
auth SHA256
auth-nocache
cipher AES-128-GCM
tls-client
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
setenv opt block-outside-dns # Prevent Windows 10 DNS leak
verb 3
<ca>
-----BEGIN CERTIFICATE-----
MIIBwDCCAWegAwIBAgIJAO3ydZUGsXlUMAoGCCqGSM49BAMCMB4xHDAaBgNVBAMM
E2NuX253blJuRDFkQ05yWTlINUkwHhcNMTgxMDE0MTgyNzQ0WhcNMjgxMDExMTgy
NzQ0WjAeMRwwGgYDVQQDDBNjbl9ud25SbkQxZENOclk5SDVJMFkwEwYHKoZIzj0C
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
MIIB0DCCAXWgAwIBAgIQcbty39sH5GLrZO6jUu6pwjAKBggqhkjOPQQDAjAeMRww
GgYDVQQDDBNjbl9ud25SbkQxZENOclk5SDVJMB4XDTE4MTAxNTA1NTE0M1oXDTIx
MDkyOTA1NTE0M1owEzERMA8GA1UEAwwIT1BOc2Vuc2UwWTATBgcqhkjOPQIBBggq
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
-----END PRIVATE KEY-----
</key>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
7416e9ee080e4215aa6191a008f8f218
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXX
-----END OpenVPN Static key V1-----
</tls-crypt>

Code: Select all

Oct 21 19:18:06	openvpn[34046]: UDP link remote: [AF_INET]**.++.++.++:1194
Oct 21 19:18:06	openvpn[34046]: UDP link local (bound): [AF_INET]192.168.10.24:0
Oct 21 19:18:06	openvpn[34046]: TCP/UDP: Preserving recently used remote address: [AF_INET]**.++.++.++:1194
Oct 21 19:18:06	openvpn[34046]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Oct 21 19:18:01	openvpn[34046]: SIGUSR1[soft,ping-restart] received, process restarting
Oct 21 19:18:01	openvpn[34046]: [UNDEF] Inactivity timeout (--ping-restart), restarting
Oct 21 19:17:01	openvpn[34046]: UDP link remote: [AF_INET]**.++.++.++:1194
Oct 21 19:17:01	openvpn[34046]: UDP link local (bound): [AF_INET]192.168.10.24:0
Oct 21 19:17:01	openvpn[34046]: TCP/UDP: Preserving recently used remote address: [AF_INET]**.++.++.++:1194
Oct 21 19:17:01	openvpn[34046]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Oct 21 19:17:01	openvpn[33704]: library versions: OpenSSL 1.0.2p 14 Aug 2018, LZO 2.10
Oct 21 19:17:01	openvpn[33704]: OpenVPN 2.4.6 amd64-portbld-freebsd11.1 [SSL (OpenSSL)] [LZO] [LZ4] [MH/RECVDA] [AEAD] built on Oct 15 2018
Oct 21 19:17:01	openvpn[33704]: WARNING: file '/var/etc/openvpn/client2.up' is group or others accessible
Oct 21 19:17:01	openvpn[72976]: SIGTERM[hard,init_instance]
Where does this part come from?

Code: Select all

verify-x509-name server_dESx9325gbq5ivvU name
Top
TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: VPN client OPNsensse

Post by TinCanTech » Mon Oct 22, 2018 12:15 pm

Best place to start is by asking the server administrator.
Top
Post Reply

Return to “Configuration”