Re: [Openvpn-users] Two questions about key generation for clients

2024-01-25 Thread Bo Berglund
On Thu, 25 Jan 2024 10:44:26 +, André via Openvpn-users wrote: >Hi, > >My unit files are in /usr/lib/systemd/system/ > >sudo systemctl list-unit-files|grep openvpn >openvpn-client@.service disableddisabled >openvpn-server@.service >. OK, this is what I see: $ sudo systemctl list-

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-25 Thread André via Openvpn-users
Hi, My unit files are in /usr/lib/systemd/system/ sudo systemctl list-unit-files|grep openvpn openvpn-client@.service disableddisabled openvpn-server@.service . . sudo systemctl edit --full openvpn-server@.service After edit and

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-25 Thread Jochen Bern
On 25.01.24 11:11, Bo Berglund wrote: 1) The "sudo systemctl edit" command brings up a blank page for me, what is the editor commands in this window? I am used to how nano works but not how I can operate in this case. Tried Ctl-X and Ctl-C to get back from it... I would guess(!) that "systemctl

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-25 Thread Bo Berglund
On Tue, 23 Jan 2024 00:23:31 +0100, David Sommerseth via Openvpn-users wrote: >On 21/01/2024 17:34, tincantech via Openvpn-users wrote: > >> >>> Can I edit this file and remove the item --suppress-timestamps to possibly >>> enable the timestamps? And remove the machine-readable-output item in th

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-22 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, On Monday, January 22nd, 2024 at 11:23 PM, David Sommerseth wrote: > On 21/01/2024 17:34, tincantech via Openvpn-users wrote: > > > > > Can I edit this file and remove the item --suppress-timestamps to possibly > > > enable the timestamps?

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-22 Thread David Sommerseth via Openvpn-users
On 21/01/2024 17:34, tincantech via Openvpn-users wrote: Can I edit this file and remove the item --suppress-timestamps to possibly enable the timestamps? And remove the machine-readable-output item in the actual service conf file? Will that result in human-readable timestamps? The recommend

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-21 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, On Sunday, January 21st, 2024 at 1:42 PM, Bo Berglund wrote: > I looked around and found this File: > > /lib/systemd/system/openvpn-server@.service That is the openvpn server unit file. > Can I edit this file and remove the item --sup

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-21 Thread Bo Berglund
On Sun, 21 Jan 2024 14:01:09 +0100, Bo Berglund wrote: >On Sun, 21 Jan 2024 12:29:57 +, André via Openvpn-users > wrote: > >>> In my logs a typical line taken at random reads: >>> >>> HakanUbu/83.166.213.132:65076 PUSH: Received control message: 'PUSH_REQUEST' >>> >>> Note: No idea about WH

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-21 Thread Bo Berglund
On Sun, 21 Jan 2024 12:29:57 +, André via Openvpn-users wrote: >> In my logs a typical line taken at random reads: >> >> HakanUbu/83.166.213.132:65076 PUSH: Received control message: 'PUSH_REQUEST' >> >> Note: No idea about WHEN this happened, that has driven me crazy many times >> when I h

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-21 Thread Bo Berglund
On Sun, 21 Jan 2024 10:39:55 +0100, Bo Berglund wrote: >On Sun, 21 Jan 2024 03:21:40 +, tincantech via Openvpn-users > wrote: > >>For posterity: >> >>Server log --verb 4: >> >> >> >>2024-01-21 03:06:59 us=764987 10.1.101.36:33510 [tct.66.c.w10.dan] Peer >>Connection Initiated with [AF_INET]1

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-21 Thread André via Openvpn-users
Sent with Proton Mail secure email. On Sunday, January 21st, 2024 at 10:39, Bo Berglund wrote: > On Sun, 21 Jan 2024 03:21:40 +, tincantech via Openvpn-users > openvpn-users@lists.sourceforge.net wrote: > > > For posterity: > > > > Server log --verb 4: > > > > > > > > 2024-01-21

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-21 Thread Gert Doering
Hi, On Sun, Jan 21, 2024 at 10:39:55AM +0100, Bo Berglund wrote: > - Include the timestamp in that logfile <== Important info! There are some options related to timestamps in the log --machine-readable-output Always write timestamps and message flags to log messages, even

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-21 Thread Bo Berglund
On Sun, 21 Jan 2024 10:10:10 +0100, Gert Doering wrote: >> Well, looking up a name in a "forbiddenusers" file which just contains alist >> of >> the CN of blocked users should qualify for "quick". > >This should normally be fine. > >Things people do in --client-connect scripts include LDAP or DN

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-21 Thread Bo Berglund
On Sun, 21 Jan 2024 03:21:40 +, tincantech via Openvpn-users wrote: >For posterity: > >Server log --verb 4: > > > >2024-01-21 03:06:59 us=764987 10.1.101.36:33510 [tct.66.c.w10.dan] Peer >Connection Initiated with [AF_INET]10.1.101.36:33510 This is very strange! I have long missed the time

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-21 Thread Gert Doering
Hi, On Sat, Jan 20, 2024 at 11:05:41PM +, tincantech via Openvpn-users wrote: > > > > Is it possible to notify the previous user via email or SMS when another > > > > user connects to the server with the same key? > > > > > > Anything can be done via --client-connect / --client-disconnect scr

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-21 Thread Gert Doering
Hi, On Sat, Jan 20, 2024 at 11:13:13PM +0100, Bo Berglund wrote: > >There is one catch: OpenVPN blocks while --client-connect executes, so > >if you do something that takes more than "few milliseconds", you need > >to return 2 right away ("deferred operation") and progress the parts > >that take l

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-20 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sent with Proton Mail secure email. On Saturday, January 20th, 2024 at 11:05 PM, tincantech via Openvpn-users wrote: > Hi, > > On Saturday, January 20th, 2024 at 6:57 PM, Bo Berglund bo.bergl...@gmail.com > wrote: > > > On Sat, 20 Jan 20

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-20 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, On Saturday, January 20th, 2024 at 6:57 PM, Bo Berglund wrote: > On Sat, 20 Jan 2024 18:41:17 +0100, Gert Doering g...@greenie.muc.de wrote: > > > > Is it possible to notify the previous user via email or SMS when another > > > user connects

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-20 Thread Bo Berglund
On Sat, 20 Jan 2024 22:17:10 +0100, Gert Doering wrote: >Hi, > >On Sat, Jan 20, 2024 at 07:57:17PM +0100, Bo Berglund wrote: >> >Anything can be done via --client-connect / --client-disconnect scripts. >> >> Very interesting, I did not know about this >> >> It makes it possible to actually

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-20 Thread Gert Doering
Hi, On Sat, Jan 20, 2024 at 07:57:17PM +0100, Bo Berglund wrote: > >Anything can be done via --client-connect / --client-disconnect scripts. > > Very interesting, I did not know about this > > It makes it possible to actually create a separate logfile for client activity > without the overhe

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-20 Thread Bo Berglund
On Sat, 20 Jan 2024 18:41:17 +0100, Gert Doering wrote: >> Is it possible to notify the previous user via email or SMS when another >> user connects to the server with the same key? > >Anything can be done via --client-connect / --client-disconnect scripts. Very interesting, I did not know about

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-20 Thread Gert Doering
Hi, On Sat, Jan 20, 2024 at 06:20:28AM +, Peter Davis wrote: > Thanks again. > It did not work! As in...? Nothing in the server logs, nothing on the client side, ...? > Is it possible to notify the previous user via email or SMS when another user > connects to the server with the same key?

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-19 Thread Peter Davis via Openvpn-users
>On Wednesday, January 17th, 2024 at 3:19 PM, Gert Doering > wrote: > Hi, > > On Wed, Jan 17, 2024 at 10:17:27AM +, Peter Davis wrote: > > > I want the previous user to be disconnected. > > > Try setting "explicit-exit-notify 2" in the server config, it might > or might not send an activ

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-17 Thread Gert Doering
Hi, On Wed, Jan 17, 2024 at 10:17:27AM +, Peter Davis wrote: > I want the previous user to be disconnected. Try setting "explicit-exit-notify 2" in the server config, it might or might not send an active disconnect to the previous user's client. gert -- "If was one thing all people took fo

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-17 Thread Gert Doering
Hi, On Wed, Jan 17, 2024 at 11:05:54AM +, Peter Davis wrote: > I think you mean "keepalive 10 120" option. Is it true? Yes. > If this option is removed, will the previous client be disconnected? No. Please read what I wrote, then read it again. There is no server functionality to activel

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-17 Thread Peter Davis via Openvpn-users
>On Wednesday, January 17th, 2024 at 2:23 PM, Gert Doering > wrote: > Hi, > > On Wed, Jan 17, 2024 at 10:17:27AM +, Peter Davis wrote: > > > But why didn't the previous OpenVPN Connect disconnect? I want the previous > > user to be disconnected. > > > I'm not 100% sure about that - I th

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-17 Thread Gert Doering
Hi, On Wed, Jan 17, 2024 at 10:17:27AM +, Peter Davis wrote: > But why didn't the previous OpenVPN Connect disconnect? I want the previous > user to be disconnected. I'm not 100% sure about that - I think the server will just pretend that the previous client with the same key stops existing,

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-17 Thread Peter Davis via Openvpn-users
>On Wednesday, January 17th, 2024 at 1:33 PM, Gert Doering > wrote: > Hi, > > On Wed, Jan 17, 2024 at 09:57:14AM +, Peter Davis wrote: > > > 2024-01-17 13:17:56 MULTI: new connection by client 'Coders_Client' will > > cause previous active sessions by this client to be dropped. Remember t

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-17 Thread Gert Doering
Hi, On Wed, Jan 17, 2024 at 09:57:14AM +, Peter Davis wrote: > 2024-01-17 13:17:56 MULTI: new connection by client 'Coders_Client' will > cause previous active sessions by this client to be dropped. Remember to use > the --duplicate-cn option if you want multiple clients using the same > c

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-17 Thread Peter Davis via Openvpn-users
>On Wednesday, January 17th, 2024 at 11:23 AM, Gert Doering > wrote: > Hi, > > On Wed, Jan 17, 2024 at 07:45:21AM +, Peter Davis wrote: > > > I use the OpenVPN Connect app on Android and PC. When I connect to the > > server with the same key on two devices, the OpenVPN Connect app on the

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-16 Thread Gert Doering
Hi, On Wed, Jan 17, 2024 at 07:45:21AM +, Peter Davis wrote: > I use the OpenVPN Connect app on Android and PC. When I connect to the server > with the same key on two devices, the OpenVPN Connect app on the previous > client does not disconnect. Why? Read the server logs. gert -- "If was

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-16 Thread Peter Davis via Openvpn-users
>On Tuesday, January 16th, 2024 at 8:40 PM, Gert Doering >wrote: > Hi, > > On Tue, Jan 16, 2024 at 05:02:59PM +, Peter Davis via Openvpn-users wrote: > > > I have generated server keys and I have two questions for generating client > > keys: > > 1- I used the following two commands to ge

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-16 Thread Gert Doering
Hi, On Tue, Jan 16, 2024 at 05:02:59PM +, Peter Davis via Openvpn-users wrote: > I have generated server keys and I have two questions for generating client > keys: > 1- I used the following two commands to generate keys for clients: > > # ./easyrsa gen-req nopass > # ./easyrsa sign-req cli