I've got an ovpn server set up with various clients which all seem to be working well up to now. I'm now trying to add additional clients.

My procedure was the following:

  1. Close OVPN
  2. In admin cmd: -vars build-key new_client
  3. Created new client files successfully.
  4. Copied CA, cert, and key files from easy-rsa\keys folder and uploaded to client machine.
  5. Created new client config file in config\ccd folder (exact same as other working client files but with new client CN and IP's)
  6. Started OVPN

So this obviously didn't work. The new client can't connect. In the log, the ifconfig pool list does not contain the new client names.

The old clients work fine.

So my question is what am I missing, do I need to replace the old CA and df files in config folder? Or something else?

  • How does the final client config file represent? Do all keys are embedded in the config file or are they have relative paths instead? – Praveen Premaratne Feb 22 '18 at 19:52
  • And why not use username and password authentication with CA and DF. That way you save a lot of hassle when you need to remove a client. At the moment if you need to remove a single user, you'll have to generate new CA and DF, result in replacing every single client that used previous CA & DF with the new once. – Praveen Premaratne Feb 22 '18 at 19:52
  • I'm not sure exactly sure what you mean in the first comment. Are you asking to see the config file ? The keys are saved in the easy-rsa/keys folder, they are not in the config file as far as I'm aware – Shane Feb 27 '18 at 17:14
  • Are your CA and HMAC embedded in the client config file or are they referred by relative path? – Praveen Premaratne Feb 27 '18 at 17:18
  • Hmm, so in the config folder I have the CA, dh , and server config file ( which referes to the CA and dh files. Within that folder there is ther ccd folder which contain the client config file which simply contains : ifconfig-push ... iroute... push route... – Shane Mar 5 '18 at 9:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.