Conflicting IP's.

[skper2]

Hi guys,
First time. I successfully connected to my Openvpn server running Win 10!
My question is this: Client1 running MAC, private IP 10.8.0.6. connected to the server. And Client2 running MAC, IP 10.8.0.6. connected to the server too. Why are there 2 conflicting addresses connected at the same time? But, Client3 running Win10 had 10.8.0.10 which is fine.

Can somebody shed me some light? Thank you!

[TinCanTech]

You used the same certificate on the two machines.

[skper2]

Hi TinCanTech, Thanks for the quick reply! Wait, aren't they supposed ( ca.crt which is the Root CA certificate) to give it to all the clients? I mean the 3rd client is the same certificate as the others and he's getting a different IP which is normal. For the mean time, I am still busy looking for the certificate ca.crt file in my Mac. Stucked, in Keychain Access, openvpn icon is locked. Tried putting the password and it's not successful. Or maybe I will try to just delete the profile under OpenVPN Connect app, so it will get rid of the conflicting IP? I appreciated your help and thank you!

[skper2]

You used the same certificate on the two machines.

Hi TinCanTech, yes you were right about the same certificate on the 2 machines. Thanks! So, what I did was uninstalled and installed back again Openvpn 2.4.11. I successfully logged in to the server. But, when I tried to add a user by typing under easy-rsa folder build-key, it says openssl is not recognized as internal or external command. I have been doing my homework late nights on how to solve that problem with this link viewtopic.php?t=24822 and I finally figured out where to put that openssl.exe in my windows PATH environment variable, under System,Advance system settings and click Environment variables. After I did that, went back to add a user, but it was still not successful, I forgot the message was it's not about openssl is not recognized anymore it was something else. Anyways, I got frustrated I typed vars and clean-all. Now, I am going to start a new server name again and hoping it will be ok. You mentioned, the simple way to do this is re-install openvpn correctly, you think you can show me? And also use mentioned using EasyRSA I got the 3.0.8 from github which you provided the link, thanks! How and which folder do I get into so I can go on with build-ca or build-key? I know this is too much to ask, but I'm interested to learn. I don't work in an IT department, I'm a porter as a profession in a hospital, but thinking of taking some courses to go to IT.

[TinCanTech]

Start from the top:

I finally figured out where to put that openssl.exe in my windows PATH environment variable, under System,Advance system settings and click Environment variables

You should not do this. You should probably undo this change ..

If you installed Openvpn correctly then this is all setup for you.

[skper2]

Start from the top:

I finally figured out where to put that openssl.exe in my windows PATH environment variable, under System,Advance system settings and click Environment variables

You should not do this. You should probably undo this change ..

If you installed Openvpn correctly then this is all setup for you.

Ok, I will try not to touch that PATH again. Ok, thanks for the quick reply!

[TinCanTech]

Hopefully, tomorrow OpenVPN 2.5.5 will be available for download.

[skper2]

Hopefully, tomorrow OpenVPN 2.5.5 will be available for download.

Hi TinCanTech, yup the latest version came up the next day as you predicted!
I took a break, I had a terrible headache doing this stuff. I installed the 2.5.5v today, but omg! it's a new thing, new CLI, I'm coming from 2.4.9v. I am stucked at the server.ovpn file edit configuration. I was searching if there were guides or tutorials to install this new version. Anyway, I will try to continue to solve my issue.
I hate to ask you this but, do you have any idea where I could find some guides to install this new version? I am used to the old thing.
Thank you.

[TinCanTech]

I hate to ask you this but, do you have any idea where I could find some guides to install this new version? I am used to the old thing.

I do not know of such a guide.

Do you mean: How to upgrade From OpenVPN 2.4 to OpenVPN 2.5 ?

Or something else ? (This is an Easy-RSA Forum).

[skper2]

I hate to ask you this but, do you have any idea where I could find some guides to install this new version? I am used to the old thing.

I do not know of such a guide.

Do you mean: How to upgrade From OpenVPN 2.4 to OpenVPN 2.5 ?

Or something else ? (This is an Easy-RSA Forum).

Hi TinCanTech, No, not to upgrade from OpenVPN 2.4 to OpenVPN 2.5. I completely uninstalled OpenVPN 2.4 and freshly installed OpenVPN 2.5.5
I finally found some guides, https://shebangthedolphins.net/vpn_open ... erver.html and https://wiki.teltonika-networks.com/vie ... on_Windows

Now, the first guide was saying to put the files to c:\program files\openvpn\config-auto and c:\program files\openvpn\config which I did. By the way the old versions has only \config folder in which the files reside. The latest version, there are two folders \config-auto and \config to which the files reside. Boy, confusing! Now, the second link guide suggested to the \config folder only which I knew.
I tried both (guides) folders and I cannot successfully run my server. And here's my log error: Options error: In server.ovpn:1: Maximum option line length (256) exceeded, line starts with
#############################################
# Sample OpenVPN 2.0 config file for #
# multi-client server. #
#
# This file is for the server side #
Use --help for more information. #

I never had this errors in my previous versions before, now this latest one, I can't even run my server!
I don't understand the log error message. I followed the guides carefully.
It's 2:22am EST I'm tired.
Thanks TinCanTech!

[TinCanTech]

Options error: In server.ovpn:1: Maximum option line length (256) exceeded, line starts with
#############################################
# Sample OpenVPN 2.0 config file for #
# multi-client server. #
#
# This file is for the server side #
Use --help for more information. #

Edit the long line ..

\config-auto is where you put configs which you want to start at boot. Not at all confusing ..

If you are upgrading from Easy-RSA version 2 to version 3 then see:

Code: Select all

./easyrsa help upgrade

[skper2]

Options error: In server.ovpn:1: Maximum option line length (256) exceeded, line starts with
#############################################
# Sample OpenVPN 2.0 config file for #
# multi-client server. #
#
# This file is for the server side #
Use --help for more information. #

Edit the long line ..

\config-auto is where you put configs which you want to start at boot. Not at all confusing ..

If you are upgrading from Easy-RSA version 2 to version 3 then see:

Code: Select all

./easyrsa help upgrade

Hi TinCanTech!
Sorry to bother you again, I have installed v. 2.5.5 and using the easyrsa + easytls, everything is doing fine except I cannot start the server successfully. I went back and forth 2 or 3x to install v. 2.5.5 and the old v. now I want to stick with the latest one.
Can you pls. tell me what line exactly I need to edit? I took out that long ############################# line 1 in the very top, I even took out the other line maybe line 18 same line as the top and I still can't start the server. It's so frustrating! Sorry. I am so close, but no.
I had successful run in v. 2.4.9 up until that error message build-ca.bat won't work, I can't make new clients. Now, with this new v. with easyrsa, I could make new clients with no problem until this error maximum line length 256 exceeded. Where do I find line 256 so I can correct this error? Please and thank you!

[TinCanTech]

If you cannot figure out how to edit a file then delete the file and start over.

[skper2]

If you cannot figure out how to edit a file then delete the file and start over.

I tried to edit the server and client files, but with no success. And suddenly I see this weird letters:
Options error: In plaza2server.ovpn:1: Maximum option line length (256) exceeded, line starts with port 1194
proto udp
dev tun

ca “C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\ca.crt”

cert “C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\issued\\plaza2server.crt”

key “C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\private\\plaza2server.key”

dh â
Use --help for more information.

What letters or characters are these? I will re-install again until I am successful. Thanks bro. keep you posted.

[TinCanTech]

Oh, are you editing files in a word processor software suite ?

[skper2]

Oh, are you editing files in a word processor software suite ?

Ah, no those are the log file after I started the server with an error message. I use notepad++ to edit the .ovpn files.

[TinCanTech]

Openvpn does not produce those characters in log/config files .. your guess is as good as mine ?

notepad++ maybe doing something unexpected ..

[skper2]

Openvpn does not produce those characters in log/config files .. your guess is as good as mine ?

notepad++ maybe doing something unexpected ..

I was following this tutorial, https://supporthost.in/how-to-install-a ... indows-10/ and downloaded and unzipped the easy-tls-master folder. The instruction says to place the easytls and easytls-openssl.cnf files to the easyrsa folder, but I can't find the easytls-openssl.cnf file in the folder. Can I still generate the tls-auth file without the easytls-openssl.cnf? I actually tried it and it still generated in that folder \pki\easytls\.
Would that still work normally? Also, before I did that, I already had the ta.key file running successfully under config folder. What are the difference between those two files? And can I use them both at the same time while running the server? I know those 2 files are for the extra layer of security against DoH, port flood and so on, etc. Or can I just use either one of them is fine? I know I am asking (stupid) too much questions, sorry. By the way, I installed 2.4.11 v. and using EasyRsa3 .0.8. Because, whenever I installed the latest version for some reason I couldn't start my server, so I stick with the old. Thanks a lot! I don't work in an IT field. But, I am interested in computer security. Took some computer courses 20yrs. ago, but lately interested in going back. lol good night!

[TinCanTech]

The instruction says to place the easytls and easytls-openssl.cnf files to the easyrsa folder

You can forget about easytls-openssl.cnf, it is now handled automatically.

[skper2]

The instruction says to place the easytls and easytls-openssl.cnf files to the easyrsa folder

You can forget about easytls-openssl.cnf, it is now handled automatically.

Oh, great, thanks!