Tag Info

Hot answers tagged

1

The problem was not in Shorewall config at all. There actually WAS access from VPN to the Internet, but VPN clients had wrong DNS server address. There was a line in OpenVPN's server.conf push "dhcp-option DNS 192.168.0.1" Which didn't make sense in given setup. I corrected the address, and now VPN clients do have access to the Internet.


1

What are you seeing re: "receives the packet"? It doesn't appear it's responding at all. Try to telnet to the port where you're running OpenVPN. Guessing maybe you didn't add a firewall rule on WAN allowing traffic to reach the OpenVPN server instance and it's getting blocked. You'll see that in the firewall log if that's the case. You're best off using ...


1

Not really an answer, I know, I've just pasted my configs on OPs request. Client config: remote xxxx.no-ip.info port 1195 float # network dev tun0 ifconfig 192.168.7.98 192.168.7.97 route 192.168.7.64 255.255.255.224 192.168.7.97 route 192.168.7.128 255.255.255.224 192.168.7.97 # symmetrical key secret /etc/openvpn/scalpel/static.key # compression ...


1

One of my clients depends heavily on OpenVPN over a multi-site setup, and we take two approaches: The main OpenVPN service is provided by two machines, in an HA-failover pair using heartbeat/CRM. If one goes down, the other takes over the shared IP addresses, and service continues. Existing sessions will be dropped, but the clients usually reauthenticate ...


1

I happen to be running an OpenVPN server in TCP mode, and I can confirm that you cannot use openssl s_client to get the certificate: [me@risby 17]$ openssl s_client -connect openvpn.example.com:1194 CONNECTED(00000003) 140413456672632:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:184: --- no peer certificate available --- No client ...


1

What you will have problems to retrieve is the ca.key. The ca.cert is distributed to the clients alongside the client.crt and client.key. You should be able to get it from there. The ca.key on the other side not distributed and it is what is used to signing server and client certificates. The whole point of the PKI, Public key infrastructure, is to make ...



Only top voted, non community-wiki answers of a minimum length are eligible