Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Scenario:

I have a Debian 6 openVPN virtual server and several clients (windows, os x). They all connect fine, however only one client with a certain key/certificate pair can ping the server, all the others fail with no error output in the log.

What I've done:

On the server I created via ./build-key <client-name> in the easy-rsa tool of openVPN several keys for the clients - all but one do not work when I use them as key/crt in the clients configuration. I cannot see any difference from the working key files to the non-working ones. Some keys were created before that working key was created, some after that. I used the same above stated command for all keys. I tried with the openssl verify command and checked the md5 hashsums to find if any of the keys got corrupted while copying to the client but couldn't find any differences. Also the CA and it's name is the same on all clients crt files.

What I need:

Since I couldn't find any related questions, can anyone help me in narrowing down the error? I thoought about creating new keys for new clients, which I already did, but with no success, or else I wouldn't ask here :) Are there any methods I don't know yet how I can check for irregularities in the client key files?

Any help is appreciated! Thanks a lot

(sorry if my english sounds slightly weird, it isn't my first language)

Please see this earlier question from me about the setup: openvpn: connection established, can't ping server tun interface (debian server, windows & os x clients)

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

After generating more key/certificate pairs without success I could narrow the problem down by finding that only the key/certificate pair, that was used first after a openvpn server restart to connect to a client, was working until the next restart of the serverside openvpn service.

You can find more and elaborate discussion about it here: ping debian vpn server from windows clients

The final solution was to switch form the Linux-vServer based vserver to a KVM based one, since then everything regarding openvpn works without any problems..

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.