Windows xp worked and the 7 don't.
Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech
Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
-
- OpenVPN User
- Posts: 48
- Joined: Sun Oct 03, 2010 4:55 pm
Windows xp worked and the 7 don't.
Hello folks,
What is the differences of a .ovpn in a windows xp and in the 7?
What is the differences of a .ovpn in a windows xp and in the 7?
-
- Forum Team
- Posts: 117
- Joined: Tue Jun 09, 2009 4:25 pm
- Location: St. Louis, MO USA
Re: Windows xp worked and the 7 don't.
Nothing except for the windows 7 specific configuration parameters. A .ovpn file is still a client config file.
-
- OpenVPN User
- Posts: 48
- Joined: Sun Oct 03, 2010 4:55 pm
Re: Windows xp worked and the 7 don't.
Hello george thanks for your answer but it still works on xp and the 7 don't what are the differences between the the parameter on xp and what is the necessary on 7?
-
- OpenVPN User
- Posts: 48
- Joined: Sun Oct 03, 2010 4:55 pm
Re: Windows xp worked and the 7 don't.
Hello again I think it is a route problem, but why it works on xp?
What should I do different on 7?
If somebody can help with that information can you post something.
What should I do different on 7?
If somebody can help with that information can you post something.
-
- Forum Team
- Posts: 117
- Joined: Tue Jun 09, 2009 4:25 pm
- Location: St. Louis, MO USA
Re: Windows xp worked and the 7 don't.
Put this in your client config:
This should get the routes pushed from the openvpn server.
Code: Select all
route-method exe
route-delay 2
-
- OpenVPN User
- Posts: 48
- Joined: Sun Oct 03, 2010 4:55 pm
Re: Windows xp worked and the 7 don't.
thanks for people from MO,
hello george and others, I am having this problem.
my server conf (linux) is...
port 2222
proto udp
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh1024.pem
server 192.168.100.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.0.0 255.255.255.0"
keepalive 10 120
comp-lzo
max-clients 1
user nobody
persist-key
persist-tun
status /var/log/openvpnstatus.log
log /var/log/openvpn.log
log-append /var/log/openvpn.log
verb 7
script-security 2
and my client ovpn is
client
dev tun
proto udp
remote X.X.X.X 2222
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert guilherme.crt
key guilherme.key
ns-cert-type server
comp-lzo
verb 3
route-method exe
route-delay 2
and my log is...
TLS: Initial packet from X.X.X.X:2222, sid=b43a4649 868be231
Wed Dec 22 03:01:27 2010 VERIFY ERROR: depth=0, error=unsupported certificate purpose: /C=BR/ST=SP/L=SaoPaulo/O=softwarelivre/CN=server
Wed Dec 22 03:01:27 2010 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Wed Dec 22 03:01:27 2010 TLS Error: TLS object -> incoming plaintext read error
Wed Dec 22 03:01:27 2010 TLS Error: TLS handshake failed
Wed Dec 22 03:01:27 2010 TCP/UDP: Closing socket
Wed Dec 22 03:01:27 2010 SIGUSR1[soft,tls-error] received, process restarting
Wed Dec 22 03:01:27 2010 Restart pause, 2 second(s)
Wed Dec 22 03:01:29 2010 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Dec 22 03:01:29 2010 Re-using SSL/TLS context
Wed Dec 22 03:01:29 2010 LZO compression initialized
Wed Dec 22 03:01:29 2010 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Dec 22 03:01:29 2010 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Dec 22 03:01:29 2010 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Dec 22 03:01:29 2010 Local Options hash (VER=V4): '41690919'
Wed Dec 22 03:01:29 2010 Expected Remote Options hash (VER=V4): '530fdded'
Wed Dec 22 03:01:29 2010 UDPv4 link local: [undef]
Wed Dec 22 03:01:29 2010 UDPv4 link remote: X.X.X.X:2222
hello george and others, I am having this problem.
my server conf (linux) is...
port 2222
proto udp
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh1024.pem
server 192.168.100.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.0.0 255.255.255.0"
keepalive 10 120
comp-lzo
max-clients 1
user nobody
persist-key
persist-tun
status /var/log/openvpnstatus.log
log /var/log/openvpn.log
log-append /var/log/openvpn.log
verb 7
script-security 2
and my client ovpn is
client
dev tun
proto udp
remote X.X.X.X 2222
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert guilherme.crt
key guilherme.key
ns-cert-type server
comp-lzo
verb 3
route-method exe
route-delay 2
and my log is...
TLS: Initial packet from X.X.X.X:2222, sid=b43a4649 868be231
Wed Dec 22 03:01:27 2010 VERIFY ERROR: depth=0, error=unsupported certificate purpose: /C=BR/ST=SP/L=SaoPaulo/O=softwarelivre/CN=server
Wed Dec 22 03:01:27 2010 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Wed Dec 22 03:01:27 2010 TLS Error: TLS object -> incoming plaintext read error
Wed Dec 22 03:01:27 2010 TLS Error: TLS handshake failed
Wed Dec 22 03:01:27 2010 TCP/UDP: Closing socket
Wed Dec 22 03:01:27 2010 SIGUSR1[soft,tls-error] received, process restarting
Wed Dec 22 03:01:27 2010 Restart pause, 2 second(s)
Wed Dec 22 03:01:29 2010 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Dec 22 03:01:29 2010 Re-using SSL/TLS context
Wed Dec 22 03:01:29 2010 LZO compression initialized
Wed Dec 22 03:01:29 2010 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Dec 22 03:01:29 2010 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Dec 22 03:01:29 2010 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Dec 22 03:01:29 2010 Local Options hash (VER=V4): '41690919'
Wed Dec 22 03:01:29 2010 Expected Remote Options hash (VER=V4): '530fdded'
Wed Dec 22 03:01:29 2010 UDPv4 link local: [undef]
Wed Dec 22 03:01:29 2010 UDPv4 link remote: X.X.X.X:2222
-
- Forum Team
- Posts: 117
- Joined: Tue Jun 09, 2009 4:25 pm
- Location: St. Louis, MO USA
Re: Windows xp worked and the 7 don't.
Here's your problem, (at least the one to fix first).
http://openvpn.net/index.php/open-sourc ... o.html#pki
Refer to this howto for more information on certificate setup:Wed Dec 22 03:01:27 2010 VERIFY ERROR: depth=0, error=unsupported certificate purpose: /C=BR/ST=SP/L=SaoPaulo/O=softwarelivre/CN=server
http://openvpn.net/index.php/open-sourc ... o.html#pki
-
- OpenVPN User
- Posts: 48
- Joined: Sun Oct 03, 2010 4:55 pm
Re: Windows xp worked and the 7 don't.
thanks george it worked I was sending the build-key-server to the clients instead of build-key