Windows xp worked and the 7 don't.

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
pinguim007
OpenVPN User
Posts: 48
Joined: Sun Oct 03, 2010 4:55 pm

Windows xp worked and the 7 don't.

Post by pinguim007 » Wed Dec 15, 2010 5:37 am

Hello folks,

What is the differences of a .ovpn in a windows xp and in the 7?

george
Forum Team
Posts: 117
Joined: Tue Jun 09, 2009 4:25 pm
Location: St. Louis, MO USA

Re: Windows xp worked and the 7 don't.

Post by george » Wed Dec 15, 2010 2:48 pm

Nothing except for the windows 7 specific configuration parameters. A .ovpn file is still a client config file.

pinguim007
OpenVPN User
Posts: 48
Joined: Sun Oct 03, 2010 4:55 pm

Re: Windows xp worked and the 7 don't.

Post by pinguim007 » Thu Dec 16, 2010 12:10 am

Hello george thanks for your answer but it still works on xp and the 7 don't what are the differences between the the parameter on xp and what is the necessary on 7?

pinguim007
OpenVPN User
Posts: 48
Joined: Sun Oct 03, 2010 4:55 pm

Re: Windows xp worked and the 7 don't.

Post by pinguim007 » Thu Dec 16, 2010 1:17 am

Hello again I think it is a route problem, but why it works on xp?

What should I do different on 7?

If somebody can help with that information can you post something.

george
Forum Team
Posts: 117
Joined: Tue Jun 09, 2009 4:25 pm
Location: St. Louis, MO USA

Re: Windows xp worked and the 7 don't.

Post by george » Fri Dec 17, 2010 3:26 pm

Put this in your client config:

Code: Select all

route-method exe 
route-delay 2
This should get the routes pushed from the openvpn server.

pinguim007
OpenVPN User
Posts: 48
Joined: Sun Oct 03, 2010 4:55 pm

Re: Windows xp worked and the 7 don't.

Post by pinguim007 » Wed Dec 22, 2010 10:49 am

thanks for people from MO,

hello george and others, I am having this problem.

my server conf (linux) is...

port 2222
proto udp
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh1024.pem
server 192.168.100.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.0.0 255.255.255.0"
keepalive 10 120
comp-lzo
max-clients 1
user nobody
persist-key
persist-tun
status /var/log/openvpnstatus.log
log /var/log/openvpn.log
log-append /var/log/openvpn.log
verb 7
script-security 2


and my client ovpn is

client
dev tun
proto udp
remote X.X.X.X 2222
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert guilherme.crt
key guilherme.key
ns-cert-type server
comp-lzo
verb 3
route-method exe
route-delay 2

and my log is...
TLS: Initial packet from X.X.X.X:2222, sid=b43a4649 868be231
Wed Dec 22 03:01:27 2010 VERIFY ERROR: depth=0, error=unsupported certificate purpose: /C=BR/ST=SP/L=SaoPaulo/O=softwarelivre/CN=server
Wed Dec 22 03:01:27 2010 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Wed Dec 22 03:01:27 2010 TLS Error: TLS object -> incoming plaintext read error
Wed Dec 22 03:01:27 2010 TLS Error: TLS handshake failed
Wed Dec 22 03:01:27 2010 TCP/UDP: Closing socket
Wed Dec 22 03:01:27 2010 SIGUSR1[soft,tls-error] received, process restarting
Wed Dec 22 03:01:27 2010 Restart pause, 2 second(s)
Wed Dec 22 03:01:29 2010 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Dec 22 03:01:29 2010 Re-using SSL/TLS context
Wed Dec 22 03:01:29 2010 LZO compression initialized
Wed Dec 22 03:01:29 2010 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Dec 22 03:01:29 2010 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Dec 22 03:01:29 2010 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Dec 22 03:01:29 2010 Local Options hash (VER=V4): '41690919'
Wed Dec 22 03:01:29 2010 Expected Remote Options hash (VER=V4): '530fdded'
Wed Dec 22 03:01:29 2010 UDPv4 link local: [undef]
Wed Dec 22 03:01:29 2010 UDPv4 link remote: X.X.X.X:2222

george
Forum Team
Posts: 117
Joined: Tue Jun 09, 2009 4:25 pm
Location: St. Louis, MO USA

Re: Windows xp worked and the 7 don't.

Post by george » Wed Dec 22, 2010 4:19 pm

Here's your problem, (at least the one to fix first).
Wed Dec 22 03:01:27 2010 VERIFY ERROR: depth=0, error=unsupported certificate purpose: /C=BR/ST=SP/L=SaoPaulo/O=softwarelivre/CN=server
Refer to this howto for more information on certificate setup:

http://openvpn.net/index.php/open-sourc ... o.html#pki

pinguim007
OpenVPN User
Posts: 48
Joined: Sun Oct 03, 2010 4:55 pm

Re: Windows xp worked and the 7 don't.

Post by pinguim007 » Wed Dec 22, 2010 9:59 pm

thanks george it worked I was sending the build-key-server to the clients instead of build-key

Post Reply