I recently installed OpenVPN on a remote CentOS 7 web server. I am able to connect to it from a local CentOS 7 devbox by typing
openvpn --config /path/to/client.ovpn. Once the connection is made, I am then able to
ssh to the server through the vpn by typing
ssh email@example.com, and I am able to view web apps hosted by apache on the remote server through the vpn by typing
https : / / 10.8.0.1 into a web browser. So how can I my non-technical end-users make the same https connections from windows?
I downloaded and installed the SecurePoint OpenVPN client for Windows. I was then able to create a config for the server, including links to the .crt and .key files and definitions of other parameters that were defined in the
client.ovpn file in Linux. The SecurePoint client then forced me to use a username and password for an OS account on the remote server (perhaps for the better), but does not allow me to connect to web apps running on the server. Specifically, typing
https : / / 10.8.0.1 into a web browser results in "This page can't be displayed", even though my Linux devbox allows content to be served from the server through the vpn to the client as described in the preceding paragraph. What am I doing wrong? And how can I get this to work?
As per @garethTheRed's advice, I typed
sudo firewall-cmd --list-all --zone=internal and got the following results:
internal (active) interfaces: tun0 sources: services: dhcpv6-client https ipp-client mdns samba-client ssh ports: masquerade: no forward-ports: icmp-blocks: rich rules: rule family="ipv4" source NOT address="10.8.1.1" service name="ssh" reject
I then clicked "connect" in the SecurePoint GUI and, after it said the connection to the server was established, I opened up cmd.exe and typed
ping 10.8.0.1 and got the following results:
Pinging 10.8.0.1 with 32 bytes of data: Request timed out. Request timed out. Request timed out. Request timed out. Ping statistics for 10.8.0.1: Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
Unchecking the user/auth option removed the username/password login requirement.
Note that, when SecurePoint is connected, all other internet access through the browser seems blocked because all requests for pages are rejected. Also, the VPN shows up in the windows list of wifi networks as "Unidentified Network" with "no internet access". When I disconnect from the VPN using SecurePoint, the "Unidentified Network" goes away. You can see what it looks like when the VPN connection is active by clicking on this link
What else can I try?