I have a Debian 6 openVPN virtual server and several clients (windows, os x). They all connect fine, however only one client with a certain key/certificate pair can ping the server, all the others fail with no error output in the log.

What I've done:

On the server I created via ./build-key <client-name> in the easy-rsa tool of openVPN several keys for the clients - all but one do not work when I use them as key/crt in the clients configuration. I cannot see any difference from the working key files to the non-working ones. Some keys were created before that working key was created, some after that. I used the same above stated command for all keys. I tried with the openssl verify command and checked the md5 hashsums to find if any of the keys got corrupted while copying to the client but couldn't find any differences. Also the CA and it's name is the same on all clients crt files.

What I need:

Since I couldn't find any related questions, can anyone help me in narrowing down the error? I thoought about creating new keys for new clients, which I already did, but with no success, or else I wouldn't ask here :) Are there any methods I don't know yet how I can check for irregularities in the client key files?

Any help is appreciated! Thanks a lot

(sorry if my english sounds slightly weird, it isn't my first language)

Please see this earlier question from me about the setup: openvpn: connection established, can't ping server tun interface (debian server, windows & os x clients)

1 Answer 1


After generating more key/certificate pairs without success I could narrow the problem down by finding that only the key/certificate pair, that was used first after a openvpn server restart to connect to a client, was working until the next restart of the serverside openvpn service.

You can find more and elaborate discussion about it here: ping debian vpn server from windows clients

The final solution was to switch form the Linux-vServer based vserver to a KVM based one, since then everything regarding openvpn works without any problems..

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .