OpenVPN Support Forum

After I updated certificates of VPN connection (CA and Server certificates expired) following this guide:
https://www.linux.com/training-tutorial ... ver-linux/

I added a new client in order to check connection, but it doen't work. I'm unable to connect to the server from clients.

Server Version:
openvpn --version
OpenVPN 2.4.6 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Apr 24 2018
library versions: OpenSSL 1.0.1f 6 Jan 2014, LZO 2.06

Error Logs from client:
TCP/UDP: Preserving recently used remote address: [AF_INET]
Attempting to establish TCP connection with [AF_INET] [nonblock]
../clutter/clutter/clutter-actor.c The clutter_actor_set_allocation() function can only be called from within the implementation of the ClutterActor::allocate() virtual function.
TCP connection established with [AF_INET]
TCP_CLIENT link local: (not bound)
TCP_CLIENT link remote: [AF_INET]
Connection reset, restarting [-1]
SIGUSR1[soft,connection-reset] received, process restarting


What could be the problem?
I don't know what might be missing.

Clarification:
In the logs, after each [AF_INET] the public IP:port is shown (nothing more than I do not show it in the post).
Thanks

Hi ascentio,

This does not look like the type of error where you're configuring OpenVPN wrong, this is the type of error where the program was not compiled correctly or has some program error in the code itself.

Since you're dealing with a very old version of OpenVPN (2.4.6 was originally released in April of 2018, so is now four and a half years old) I would first like to suggest you update that to the latest version. We have a software repository that offers latest versions of OpenVPN2 for various operating systems;
https://community.openvpn.net/openvpn/w ... twareRepos

Please try to upgrade to that version and then try again.

Kind regards,
Johan

Hello Johan
Thanks for your response.
Do you know if it's possible for us to install the last openvpn version directly? or how can it be done?
Regards,
Martin

Hello ascentio,

Probably yes, our software repositories contain the latest version for the most common Linux operating systems. Please follow the link and read the information there.

Kind regards,
Johan

Hello Johan,
I upgraded to Ubuntu 18.04 LTS and later upgraded to OpenVPN 2.5.7 using the mentioned by you Repositories (openvpn is already the newest version (2.5.7-bionic0).)

openvpn --version
OpenVPN 2.5.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 24 2022
library versions: OpenSSL 1.1.1 11 Sep 2018, LZO 2.08

I'm still unable to connect to the server from clients.

Error Logs from client:
journalctl -f
TCP/UDP: Preserving recently used remote address: [AF_INET]IP:port
Attempting to establish TCP connection with [AF_INET]IP:port [nonblock]
wlp3s0: WPA: Group rekeying completed with 08:55:31:02:67:0d [GTK=CCMP]
TCP connection established with [AF_INET]IP:port
TCP_CLIENT link local: (not bound)
TCP_CLIENT link remote: [AF_INET]IP:port
Connection reset, restarting [-1]
SIGUSR1[soft,connection-reset] received, process restarting

Is there any command that show more details of VPN connection and specific issue?
In order to further troubleshoot..

For other hand, Is there a guide for a fresh Openvpn install for giving access to multiple users, lets say 50 users?
Because we used to use more than two simultaneous connections to VPN server. Please provide URL.
Best Regards,
Martin

Hello ascentio,

At least now there's no error like before now. You can run the client on the command line like openvpn --config client.ovpn and you'll see all the output on your screen. Might be helpful to see the problem.

Kind regards,
Johan

I think I need to create such client.ovpn file, because I have separated files user.crt user.key ca.crt and ta.key ...
Need to check that..

For other hand,
Is there a guide for a fresh Openvpn install for giving access to multiple users, lets say 50 users?
Because we used to use more than two simultaneous connections to VPN server. Please provide URL.
I'm thinking in installing a new server, any recommendation?