push doesn't work with static keys, but that's a secret

Hugh · Post by **Hugh** » Sat Jul 07, 2012 5:15 am

Apparently, the "push" command doesn't work if OpenVPN is using static keys.

This fact isn't documented in http://openvpn.net/index.php/open-sourc ... howto.html. This should be fixed.

This fact isn't documented in http://openvpn.net/index.php/open-sourc ... l#redirect. This should be fixed.

As far as I can telll, OpenVPN does not log anything when it encounters a push command that it will not honour. This should be fixed.

What a waste of my time figuring this out!

Thanks to EugeneKay for telling me about this on freenode #openvpn.

Work around: the push command just lets you specify in the server config file commands that should be issued on the client side. Just put those commands (stripped of the push) in the client's config file instead.

To be honest, I find the security implications of the push form a little troubling -- surely it is up to the client's admin to decide if all packets should be forwarded through am OpenVPN tunnel.