Re: [Openvpn-users] [ext] Re: OpenVPN-2.6.0-I004-amd64.msi still fails to work on Microsoft Windows 11 if opvpn-dco is enabled

2023-02-10 Thread Hans via Openvpn-users
Wasn’t compression done by openvpn considered a security risk, and to be avoided. Afaicr, Stephan Karger stated that compression should be done elsewhere. From: "Gert Doering" mailto:g...@greenie.muc.de>> Date: Friday, 10 February 2023 at 10:14:40 To: "Ralf Hildebrandt&q

Re: [Openvpn-users] openVPN vs openSSH for single user access

2023-02-15 Thread Hans via Openvpn-users
Before opening SSH to the wordld, you might contemplate encapsulating it with stunnel. It also helps with paranoid firewalls ;-) -Original Message- From: Stefanie Leisestreichler Sent: Tuesday, February 14, 2023 4:42 PM To: openvpn-users@lists.sourceforge.net Subject: [Openvpn-users

Re: [Openvpn-users] How to check if OpenVPN server is working properly?

2023-02-23 Thread tincantech via Openvpn-users
t) has expired. If you use Easy-rsa (https://github.com/OpenVPN/easy-rsa) then you can build a new CRL with: easyrsa gen-crl This builds a new CRL which is valid for 180 days. You can configure the validity period with option --days: easyrsa --days=365 gen-crl You can also get a

Re: [Openvpn-users] How to check if OpenVPN server is working properly?

2023-02-23 Thread tincantech via Openvpn-users
equest. This renewed certificate uses the original entity private key. Make sure that you use EasyRSA version 3.1+, otherwise 'renew' will not use the original key. Which means you also have to distribute that entity NEW private key over a secure medium.

Re: [Openvpn-users] How to check if OpenVPN server is working properly?

2023-02-23 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, --- Original Message --- On Thursday, February 23rd, 2023 at 23:20, Bo Berglund wrote: > I have used easy-rsa2 since I started with OpenVPN 10 years ago and I have > made > a script that eases the manufacture of cl

Re: [Openvpn-users] How to revoke user logins without blocking all after a timeout?

2023-02-24 Thread tincantech via Openvpn-users
at 10:58:06AM +0100, Bo Berglund wrote: > > > > > And why is there an expiration of the crl file to begin with? > > > > I explained that, but that mail seems to have been lost - it's because > > the assumption of the security folks (outside OpenVPN control) is tha

Re: [Openvpn-users] How to check if OpenVPN server is working properly?

2023-02-25 Thread tincantech via Openvpn-users
eems like the new crt file accepts the old existing client crt! > > NEXT TO DO?: > --- > I copy the ca_25.crt file to /etc/openvpn/keys dir and then edit the conf file > for the services to use this new file as the ca entry like this: > > #ca /etc/openvpn/keys/ca.crt &g

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-02 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, --- Original Message --- On Thursday, March 2nd, 2023 at 10:12, Bo Berglund wrote: > I have downloaded easy-rsa3 version to my OpenVPN server for testing. > I did so using wget on the v3.1.2/EasyRSA-3.1.2.tgz file below Relea

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-02 Thread tincantech via Openvpn-users
hanks Richard --- Original Message --- On Thursday, March 2nd, 2023 at 16:56, Bo Berglund wrote: > On Thu, 02 Mar 2023 14:01:24 +, tincantech via Openvpn-users > openvpn-users@lists.sourceforge.net wrote: > > > --- Original Message --- > > On Thursday, Ma

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-03 Thread tincantech via Openvpn-users
ng this: > > > > wget > > https://github.com/OpenVPN/easy-rsa/releases/download/v3.1.2/EasyRSA-3.1.2.tgz > > tar -xvf EasyRSA-3.1.2.tgz > > > > This gives me a new EasyRSA-3.1. subdir in parallel with the existinf > > easy-rsa > > dir. > > &g

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-03 Thread tincantech via Openvpn-users
CeNrADh5FVftZnu2wsj76SJlQ== =VvqL -END PGP SIGNATURE- publickey - tincantech@protonmail.com - 0x09BC3D44.asc Description: application/pgp-keys publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig Description: PGP signature ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-04 Thread tincantech via Openvpn-users
ki Without ';' termination, is valid. Finally: There is a bug in EasyRSA 3.1.2 which has been fixed in git/master. Please try git/master from: https://github.com/OpenVPN/easy-rsa/tree/master/easyrsa3 The bug-fix verifies that you have a working openssl before creating a temporary sessio

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-04 Thread tincantech via Openvpn-users
chapter! Regards Richard Sent with Proton Mail secure email. --- Original Message --- On Saturday, March 4th, 2023 at 17:41, tincantech wrote: > Updating openvpn-users list. > > If you do not use a browser for your internet then I do not support > what-ever method tha

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-05 Thread tincantech via Openvpn-users
_vars_match=0 > [ "$CA_organizationalUnitName" = "$KEY_OU" ] || CA_vars_match=0 > [ "$CA_emailAddress" = "$KEY_EMAIL" ] || CA_vars_match=0 > > if [ "$CA_vars_match" -eq 1 ] > then > CURRENT_CA_IS_VERIFIED="partially" > else > up23_fa

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-05 Thread tincantech via Openvpn-users
x09BC3D44.asc Description: application/pgp-keys publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig Description: PGP signature ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-05 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, Follow-up: https://github.com/OpenVPN/easy-rsa/issues/905 --- Original Message --- On Sunday, March 5th, 2023 at 22:03, Bo Berglund wrote: > On Sun, 05 Mar 2023 18:15:02 +, tincantech via Openvpn-users > openvpn

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-06 Thread tincantech via Openvpn-users
tincantech@protonmail.com - 0x09BC3D44.asc.sig Description: PGP signature _______ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-06 Thread tincantech via Openvpn-users
file yourself using openssl. To determine if a private key is password protected, simply look at the HEADER line in the file, which will read as: -BEGIN ENCRYPTED PRIVATE KEY- or -BEGIN PRIVATE KEY- For help with OpenVPN, there are two (possibly more) passwords, of which, it is not

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-06 Thread tincantech via Openvpn-users
'help options'. Basic notes: - https://github.com/OpenVPN/easy-rsa/issues/838 EasyRSA uses --passin/--passout to pass values to OpenSSL -passin/-passout. Those values are dictated by OpenSSL expected syntax. See: - https://www.openssl.org/docs/man1.1.1/man1/openssl.html (The very las

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-07 Thread tincantech via Openvpn-users
.req. > What are these used for? They (.csr and *.req) do not get into the OVPN files > and they are not mentioned in the OpenVPN server.conf files. > .csr means certificate signing request. .req means the same thing but is simply "request". For v3 they must be .req > >

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-07 Thread tincantech via Openvpn-users
download command I have used to get the latest version. > Which is: > > svn export https://github.com/OpenVPN/easy-rsa.git/trunk/easyrsa3 easyrsa3 > > It gave me these 11 files: > > A easyrsa3 > A easyrsa3/easyrsa > A easyrsa3/openssl-easyrsa.cnf > A easyrsa3/vars.e

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-08 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sent with Proton Mail secure email. --- Original Message --- On Wednesday, March 8th, 2023 at 14:30, Bo Berglund wrote: > On Wed, 08 Mar 2023 01:45:40 +, tincantech via Openvpn-users > openvpn-users@lists.sourceforge.net

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-08 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Also, Sent with Proton Mail secure email. --- Original Message --- On Wednesday, March 8th, 2023 at 16:35, tincantech via Openvpn-users wrote: > > > > > > Sent with Proton Mail secure email. > > &g

Re: [Openvpn-users] Easyrsa3 error when checking existing cert

2023-03-08 Thread tincantech via Openvpn-users
etails). > > > (previously existing client) > $ easyrsa show-cert BrittisUbu > > Showing cert details for: 'BrittisUbu' > > This file is stored at: > * /home/bosse/openvpn/easyrsa3/pki/issued/BrittisUbu.crt > Certificate: > Data: > > > X509v3 Extended Key

Re: [Openvpn-users] [ext] Re: CRL: cannot read CRL from file /etc/openvpn/ca/crl.pem

2023-06-17 Thread tincantech via Openvpn-users
, Ralf Hildebrandt via Openvpn-users wrote: > > This is from the working connection - so it's "just log noise", it seems, > > not causing an actual session abort. > > > Good! > > > My gut feeling is that there is some garbage at the end of the CRL f

Re: [Openvpn-users] [ext] Re: CRL: cannot read CRL from file /etc/openvpn/ca/crl.pem

2023-06-17 Thread tincantech via Openvpn-users
/tct/Downloads/crl.pem Using: date/time: VERIFY WARNING: depth=0, unable to get certificate CRL: It works otherwise. OpenSSL 1.1.1f openvpn 2.7_git BR Sent with Proton Mail secure email. --- Original Message --- On Saturday, June 17th, 2023 at 14:01, tincantech via Openvpn-users wrote

Re: [Openvpn-users] How to run multiple configuration files at the same time?

2023-07-24 Thread Hans via Openvpn-users
, spreading the load… From: "Jason Long via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Date: Sunday, 23 July 2023 at 10:40:44 To: "openvpn-users@lists.sourceforge.net" mailto:openvpn-users@lists.sourceforge.net>>, "Leroy Tennison" mailt

Re: [Openvpn-users] Multiple OpenVPN server on one NIC

2023-07-24 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, --- Original Message --- On Monday, July 24th, 2023 at 11:42, Jason Long via Openvpn-users wrote: > Hello, > Thank you so much for your reply. > Your answer raised another question in my mind. Can I use the sam

Re: [Openvpn-users] How to determine the correct MTU/fragment value in OpenVPN 2.6

2023-07-24 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, This seems to have been forgotten. --- Original Message --- On Thursday, July 20th, 2023 at 11:24, Niccolò Belli wrote: > I'm using Debian 12 Bookworm with OpenVPN 2.6.3 on the server and Arch > Linux with OpenVPN 2.6.5 [

Re: [Openvpn-users] Multiple OpenVPN server on one NIC

2023-07-24 Thread Hans via Openvpn-users
addresses or its clients. Duplicating those might lead to funny situations… From: "Jason Long via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Date: Sunday, 23 July 2023 at 16:41:04 To: "openvpn-users@lists.sourceforge.net" mailto:openvpn-users@lists.source

Re: [Openvpn-users] OpenVPN multiple connections and multiple NICs

2023-07-24 Thread Hans via Openvpn-users
From: "Jason Long via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Date: Saturday, 22 July 2023 at 15:06:10 To: "openvpn-users@lists.sourceforge.net" mailto:openvpn-users@lists.sourceforge.net>> Subject: [Openvpn-users] OpenVPN multiple connecti

Re: [Openvpn-users] Multiple OpenVPN server on one NIC

2023-07-24 Thread tincantech via Openvpn-users
n. If you encrypt your private keys with a password then you must enter that password to use the keys in openvpn. You would add to your config files 'askpass'. Regards. Sent with Proton Mail secure email. --- Original Message --- On Monday, July 24th, 2023 at 12:57, Jason Long wrote

Re: [Openvpn-users] Multiple OpenVPN server on one NIC

2023-07-24 Thread tincantech via Openvpn-users
OghFtlCA== =xT0w -END PGP SIGNATURE- publickey - tincantech@protonmail.com - 0x09BC3D44.asc Description: application/pgp-keys publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig Description: PGP signature _______ Openvpn-users mailing list Op

Re: [Openvpn-users] How to determine the correct MTU/fragment value in OpenVPN 2.6

2023-07-29 Thread tincantech via Openvpn-users
eport > > that as a fault to your Internet Service Provider(s). > > > Forgot what I've written before: I've did many more tests and apparently > my connection(s)' MTU is not changing but something else is going on > with openvpn. My analysis of your test data,

Re: [Openvpn-users] How to determine the correct MTU/fragment value in OpenVPN 2.6

2023-07-29 Thread tincantech via Openvpn-users
t is your server (or client). I am not interested in comparing your various network paths. Establish a well known MTU on a well known path, first. > > However, considering the data you have posted, I think OpenVPN > > has documented the most simple solution. > > > > The

Re: [Openvpn-users] How to write the iptables rules for a NIC with multiple IP addresses?

2023-07-31 Thread Hans via Openvpn-users
From: "Jason Long via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Date: Saturday, 29 July 2023 at 16:18:44 To: "Tincantech via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Subject: [Openvpn-users] How to write the iptables r

Re: [Openvpn-users] How to determine the correct MTU/fragment value in OpenVPN 2.6

2023-07-31 Thread Hans via Openvpn-users
See below. From: "tincantech via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Date: Saturday, 29 July 2023 at 18:19:07 To: "Niccolò Belli" mailto:darkba...@linuxsystems.it>> Cc: "openvpn-users@lists.sourceforge.net" mailto:openvpn

Re: [Openvpn-users] A question about "Local" option

2023-08-06 Thread tincantech via Openvpn-users
kernel scope link src 192.168.56.1 As a pointer; What ever errors exist here are only related to multiple network interfaces, there are no openvpn errors present. This question is open to all subscribers. Sent with Proton Mail secure email. --- Original Message --- On Sunday, August 6th

Re: [Openvpn-users] How to write the iptables rules for a NIC with multiple IP addresses?

2023-08-08 Thread Hans via Openvpn-users
Some thoughts below... -Original Message- From: Bo Berglund Sent: Sunday, July 30, 2023 6:02 PM To: openvpn-users@lists.sourceforge.net Subject: Re: [Openvpn-users] How to write the iptables rules for a NIC with multiple IP addresses? On Sat, 29 Jul 2023 14:11:48 + (UTC), Jason

Re: [Openvpn-users] Cannot pre-load keyfile (ta.key)

2023-08-12 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, Sent with Proton Mail secure email. --- Original Message --- On Saturday, August 12th, 2023 at 07:39, Jason Long via Openvpn-users wrote: > Hello, > I added "tls-crypt ta.key 0" and "data-cipher AES-256-G

Re: [Openvpn-users] Cannot pre-load keyfile (ta.key)

2023-08-12 Thread tincantech via Openvpn-users
; On Saturday, August 12th, 2023 at 07:39, Jason Long via Openvpn-users > openvpn-users@lists.sourceforge.net wrote: > > > > > Hello, > > I added "tls-crypt ta.key 0" and "data-cipher AES-256-GCM" to my > > Server.conf and "tls-crypt ta.key 1

Re: [Openvpn-users] A question about the local statement

2023-08-14 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, Sent with Proton Mail secure email. --- Original Message --- On Monday, August 14th, 2023 at 09:23, Jason Long via Openvpn-users wrote: > > Mon Aug 14 12:52:03 2023 read UDPv4: Connection reset by peer (WSAECONNRESET) &g

Re: [Openvpn-users] A question about the local statement

2023-08-14 Thread tincantech via Openvpn-users
lly has such an environment, then what is the solution? This question is not related to Openvpn. You must learn some basic networking knowledge via other means. A book or online class, perhaps. For now, I recommend that you DO NOT use a server with multiple NICs. See if you can get a simple server to w

Re: [Openvpn-users] How to use ccd-exclusive statement?

2023-08-14 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sent with Proton Mail secure email. --- Original Message --- On Monday, August 14th, 2023 at 14:13, Jason Long via Openvpn-users wrote: > Hello, > To increase the security of OpenVPN, I want to use the ccd-exclusive.

Re: [Openvpn-users] How to use ccd-exclusive statement?

2023-08-14 Thread tincantech via Openvpn-users
t; > I take a loot at > > "https://build.openvpn.net/man/openvpn-2.6/openvpn.8.html";, but it only > > explained the capabilities of this option and did not provide any examples. > > I did: > > # mkdir /etc/openvpn/clients > > # touch /etc/openvpn/clien

Re: [Openvpn-users] How to use ccd-exclusive statement?

2023-08-14 Thread André via Openvpn-users
Hi, Howto is here: https://community.openvpn.net/openvpn/wiki/HOWTO wkr Pippin --- Original Message --- On Monday, August 14th, 2023 at 23:11, Jason Long via Openvpn-users wrote: > On Mon, Aug 14, 2023 at 11:47 PM, tincantech > >> wrote: >> -BEGIN PGP SIGNED ME

Re: [Openvpn-users] How to use ccd-exclusive statement?

2023-08-14 Thread tincantech via Openvpn-users
e: > > > > > > > > > > Hello, > > > > Thank you so much for your help. > > > > I take a loot at > > > > "https://build.openvpn.net/man/openvpn-2.6/openvpn.8.html";, but it only > > > > explained the capabilities

Re: [Openvpn-users] How to use ccd-exclusive statement?

2023-08-15 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, --- Original Message --- On Tuesday, August 15th, 2023 at 10:57, Jason Long wrote: > Hello, > My OpenVPN server internal network IP is "192.168.1.20" and the IP address of > client is "192.168.1.21".

Re: [Openvpn-users] How to use ccd-exclusive statement?

2023-08-15 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, --- Original Message --- On Tuesday, August 15th, 2023 at 15:02, Gert Doering wrote: > Hi, > > On Tue, Aug 15, 2023 at 12:54:45PM +, Jason Long via Openvpn-users wrote: > > > I did a tcpdump: > > >

Re: [Openvpn-users] How to use ccd-exclusive statement?

2023-08-16 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Edited for brevity: --- Original Message --- > On 16.08.23 12:23, Jason Long via Openvpn-users wrote: > > I opened the ca.crt file on the client and clicked on the Details tab > > and it showed me "CN = Server". So

Re: [Openvpn-users] How to use ccd-exclusive statement?

2023-08-16 Thread tincantech via Openvpn-users
7IlaMVUdXGh6fbswg== =yypt -END PGP SIGNATURE- publickey - tincantech@protonmail.com - 0x09BC3D44.asc Description: application/pgp-keys publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig Description: PGP signature ___________ Op

Re: [Openvpn-users] Easy-RSA minimal how-to

2023-08-16 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 To follow up, a very brief introduction to Easy-RSA. Download the latest Easy-RSA: https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.5 Unpack that to a suitable folder in your HOME folder. Change directory to the new folder. Create your first

Re: [Openvpn-users] A question about the local statement

2023-08-21 Thread Hans via Openvpn-users
From: "Bruno Tréguier via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Date: Monday, 14 August 2023 at 17:01:19 To: "openvpn-users@lists.sourceforge.net" mailto:openvpn-users@lists.sourceforge.net>> Subject: Re: [Openvpn-users] A question about

Re: [Openvpn-users] Unable to redirect IPv4 default gateway -- Cannot read current default gateway from system

2023-08-21 Thread Hans via Openvpn-users
From: "Jason Long via Openvpn-users" Hello, I set a default getaway for my client and that error solved. My question is that, suppose you want to set multiple public IP addresses on the OpenVPN server. How do you As I suggested before… Did you read: https://lartc.org/lartc

Re: [Openvpn-users] Revoke a certificate and reuse it

2023-08-31 Thread Hans via Openvpn-users
From: "Jason Long via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Date: Saturday, 26 August 2023 at 07:40:18 To: "openvpn-users@lists.sourceforge.net" mailto:openvpn-users@lists.sourceforge.net>>, "Jochen Bern" mailto:jochen.b.

Re: [Openvpn-users] How to set a fixed IP to a client?

2023-09-03 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Not only but also, This HOWTO is very useful: https://community.openvpn.net/openvpn/wiki/HOWTO YMMV -- -BEGIN PGP SIGNATURE- Version: ProtonMail wsBzBAEBCAAnBYJk9GxPCZBPl5z2a5C4nRYhBAm8PURno41yecVVVU+XnPZr kLidAACK4wf

Re: [Openvpn-users] How to set a fixed IP to a client?

2023-09-03 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, --- Original Message --- On Sunday, September 3rd, 2023 at 15:06, Bruno Tréguier via Openvpn-users wrote: > Le 03/09/2023 à 15:23, Jason Long a écrit : > > > Hello, > > As I said, I have some scenario and I

Re: [Openvpn-users] URL forwarding and blacklisting

2023-09-22 Thread Hans via Openvpn-users
See below -Original Message- From: Jochen Bern Sent: Friday, September 22, 2023 1:06 AM To: openvpn-users@lists.sourceforge.net Subject: Re: [Openvpn-users] URL forwarding and blacklisting On 21.09.23 21:50, Jason Long via Openvpn-users wrote: > Hello,I have two questions:1- W

Re: [Openvpn-users] Using easyrsa3 - how to set longer expiration than 10 years?

2023-10-06 Thread tincantech via Openvpn-users
n how many days should certificates expire? # #set_var EASYRSA_CERT_EXPIRE825 HTH -- > > > -- > Bo Berglund > Developer in Sweden > > > > ___ > Openvpn-users mailing list > Openvpn-users@lists.sourceforge.ne

Re: [Openvpn-users] Using easyrsa3 - how to set longer expiration than 10 years?

2023-10-07 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sent with Proton Mail secure email. --- Original Message --- On Saturday, October 7th, 2023 at 07:20, Bo Berglund wrote: > On Fri, 06 Oct 2023 20:59:48 +, tincantech via Openvpn-users > openvpn-users@lists.sourceforge.net

[Openvpn-users] Easy-RSA v3.1.7 pre-release notice

2023-10-07 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hello OpenVPN Users, --- Original Message --- On Saturday, October 7th, 2023 at 14:27, tincantech via Openvpn-users wrote: > Note: The next release of Easy-RSA will not complain about the location > of the vars file. Until then, y

Re: [Openvpn-users] Easy-RSA v3.1.7 pre-release notice

2023-10-07 Thread tincantech via Openvpn-users
ure ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] Easy-RSA v3.1.7 pre-release notice

2023-10-07 Thread tincantech via Openvpn-users
resulting PKI can be used along side OpenVPN option --tls-groups X448. Use the PKI from EasyRSA, along with --tls-groups option on the server side. Enjoy, R -BEGIN PGP SIGNATURE- Version: ProtonMail wsBzBAEBCAAnBYJlIa36CZBPl5z2a5C4nRYhBAm8PURno41yecVVVU+XnPZr

Re: [Openvpn-users] OPenVPN 2.5 - How to allow client access to the web but not to the local LAN?

2023-10-19 Thread tincantech via Openvpn-users
l.com - 0x09BC3D44.asc Description: application/pgp-keys publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig Description: PGP signature _______ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] OPenVPN 2.5 - How to allow client access to the web but not to the local LAN?

2023-10-19 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, --- Original Message --- On Thursday, October 19th, 2023 at 23:39, tincantech via Openvpn-users wrote: > Hi, > > --- Original Message --- > On Thursday, October 19th, 2023 at 23:11, Bo Berglund bo.bergl.

Re: [Openvpn-users] OPenVPN 2.5 - How to allow client access to the web but not to the local LAN?

2023-10-19 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, --- Original Message --- On Friday, October 20th, 2023 at 00:31, Bo Berglund wrote: > On Thu, 19 Oct 2023 22:52:12 +, tincantech via Openvpn-users > openvpn-users@lists.sourceforge.net wrote: > > > I think I hav

Re: [Openvpn-users] OPenVPN 2.5 - How to allow client access to the web but not to the local LAN?

2023-10-19 Thread tincantech via Openvpn-users
C3D44.asc Description: application/pgp-keys publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig Description: PGP signature _______ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] OPenVPN 2.5 - How to allow client access to the web but not to the local LAN?

2023-10-20 Thread tincantech via Openvpn-users
ech@protonmail.com - 0x09BC3D44.asc Description: application/pgp-keys publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig Description: PGP signature ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] OPenVPN 2.5 - How to allow client access to the web but not to the local LAN?

2023-10-20 Thread tincantech via Openvpn-users
I also pointed that out ;-) > > So you mean using the same service conf file as for the web + LAN operation, > but > with a different tunnel subnet and different port? > > That would allow LAN access. This makes no sense. FWIW, openvpn does not control your firewall or

Re: [Openvpn-users] OpenVPN + Tor

2023-11-04 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, Your DNS server is non-local and you are most likely redirecting your gateway to the VPN. So, DNS packets for your DNS server are set into the tunnel and are finally dropped by the server gateway. Openvpn has option : '--redirect-ga

Re: [Openvpn-users] OpenVPN + Tor

2023-11-06 Thread tincantech via Openvpn-users
server side of the VPN; In which case you need to read the Howto section which explains "Expanding the scope of the VPN ": https://community.openvpn.net/openvpn/wiki/HOWTO#ExpandingthescopeoftheVPNtoincludeadditionalmachinesoneithertheclientorserversubnet You do not need to use "

Re: [Openvpn-users] OpenVPN + Tor

2023-11-08 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, On Tuesday, 7 November 2023 at 05:27, Jason Long wrote: > > Hello, > I added the following line to the server.conf file: > > push "route 172.20.0.0 255.255.255.0" > > Then, I restarted the OpenVPN se

Re: [Openvpn-users] Issue with "up" and "down" script

2023-11-11 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, for the record, OpenVPN does not set $PATH when executing scripts. It looks like you have partially fixed this with use of `/usr/bin/echo` but not done the same for `/usr/bin/resolvectl`. You can set your expected $PATH for the script or call

Re: [Openvpn-users] Issue with "up" and "down" script

2023-11-11 Thread tincantech via Openvpn-users
- publickey - tincantech@protonmail.com - 0x09BC3D44.asc Description: application/pgp-keys publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig Description: PGP signature ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https

Re: [Openvpn-users] Issue with "up" and "down" script

2023-11-11 Thread Hans via Openvpn-users
Up/down relate to the state of the tun device. It takes some time until you can send data through it. From: "Leroy Tennison via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Date: Saturday, 11 November 2023 at 07:21:17 To: "Openvpn Users&q

Re: [Openvpn-users] Reference manual for OpenVPN 2.6 PDF

2023-12-11 Thread Hans via Openvpn-users
From: "Antonio Quartulli" mailto:a...@unstable.cc>> Date: Monday, 11 December 2023 at 12:02:33 To: "Jason Long" mailto:hack3r...@yahoo.com>>, "Tincantech via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Subject: Re: [Openvpn-user

Re: [Openvpn-users] Reference manual for OpenVPN 2.6 PDF

2023-12-11 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I believe the correct answer here is:   OpenVPN does not provide a PDF form of the manual. Which is a practical decision. HTH --  Sent with Proton Mail secure email. On Monday, 11 December 2023 at 18:13, Hans via Openvpn-users wrote

Re: [Openvpn-users] Reference manual for OpenVPN 2.6 PDF

2023-12-11 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Also: https://openvpn.net/community-resources/#books On Monday, 11 December 2023 at 18:25, tincantech wrote: > I believe the correct answer here is:  >  OpenVPN does not provide a PDF form of the manual. > > Which is a practi

Re: [Openvpn-users] Bypassing censorship devices

2023-12-11 Thread Hans via Openvpn-users
From: "Peter Davis via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Date: Tuesday, 12 December 2023 at 07:08:08 To: "Tincantech via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Subject: [Openvpn-users] Bypassing censorship devices

Re: [Openvpn-users] Bypassing censorship devices

2023-12-12 Thread Hans via Openvpn-users
From: "Peter Davis" mailto:peter.davis1...@proton.me>> Date: Tuesday, 12 December 2023 at 19:29:03 To: "Witvliet, J, Ing." mailto:j.witvl...@mindef.nl>> Cc: "openvpn-users@lists.sourceforge.net" mailto:openvpn-users@lists.sourceforge.net>> S

Re: [Openvpn-users] Bypassing censorship devices

2023-12-12 Thread Hans via Openvpn-users
From: "Peter Davis via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Date: Tuesday, 12 December 2023 at 19:37:47 To: "Stella Ashburne" mailto:rewe...@gmx.com>> Cc: "openvpn-users@lists.sourceforge.net" mailto:openvpn-users@lists.sou

Re: [Openvpn-users] Bypassing censorship devices

2023-12-12 Thread Hans via Openvpn-users
From: "Peter Davis via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Date: Tuesday, 12 December 2023 at 19:46:18 To: "Stella Ashburne" mailto:rewe...@gmx.com>> Cc: "openvpn-users@lists.sourceforge.net" mailto:openvpn-users@lists.sou

Re: [Openvpn-users] Reference manual for OpenVPN 2.6 PDF

2023-12-13 Thread Hans via Openvpn-users
From: "Jochen Bern" mailto:jochen.b...@binect.de>> Date: Wednesday, 13 December 2023 at 09:56:08 To: "openvpn-users@lists.sourceforge.net" mailto:openvpn-users@lists.sourceforge.net>> Subject: Re: [Openvpn-users] Reference manual for OpenVPN 2.6 PDF On 13.12.

Re: [Openvpn-users] Bypassing censorship devices

2023-12-13 Thread Hans via Openvpn-users
From: Peter Davis Sent: Wednesday, December 13, 2023 10:52 AM To: Witvliet, J, Ing. Cc: rewe...@gmx.com; openvpn-users@lists.sourceforge.net Subject: Re: [Openvpn-users] Bypassing censorship devices > On Wednesday, December 13th, 2023 at 12:13 AM, > j.witvl...@mindef.nl<mailt

Re: [Openvpn-users] easy-rsa

2023-12-28 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, Sent with Proton Mail secure email. On Thursday, 28 December 2023 at 04:15, Leroy Tennison via Openvpn-users wrote: > These are truly wild guesses but > All good advice. > On Wednesday, December 27, 2023 at 09:13:21 PM CST

Re: [Openvpn-users] easy-rsa

2023-12-29 Thread tincantech via Openvpn-users
nmail.com - 0x09BC3D44.asc Description: application/pgp-keys publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig Description: PGP signature _______ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists

Re: [Openvpn-users] I have a question about Easy-RSA

2024-01-06 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sent with Proton Mail secure email. On Saturday, 6 January 2024 at 06:48, Peter Davis via Openvpn-users wrote: > Hello, > > I edited the vars file as below and created an OpenVPN server: > > > export KEY_COUNTRY="

Re: [Openvpn-users] I have a question about Easy-RSA

2024-01-06 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, Sent with Proton Mail secure email. On Saturday, 6 January 2024 at 06:48, Peter Davis via Openvpn-users wrote: > Hello, > > I edited the vars file as below and created an OpenVPN server: > > > export KEY_COUNTRY="

[Openvpn-users] tls-crypt2

2024-01-08 Thread Hans via Openvpn-users
ate accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages. _______ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] tls-crypt2

2024-01-08 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, Sent with Proton Mail secure email. On Monday, 8 January 2024 at 20:46, Antonio Quartulli wrote: > Hi, > > On 08/01/2024 21:34, Hans via Openvpn-users wrote: > > 1) how can I revoke a SINGLE client key (as this was

Re: [Openvpn-users] Limit the number of users based on the key

2024-01-15 Thread tincantech via Openvpn-users
named "client" under /etc/openvpn/ > > directory? > The /etc/openvpn/client directory is intended for use of client openvpn configuration files. Specifically, for use with systemd. You will need to familiarise yourself with systemd to continue. I believe openvpn have a

Re: [Openvpn-users] Reaching connected client machine from the server through the tunnel?

2024-01-17 Thread André via Openvpn-users
which does not have a public IP address. > > > > The RPi will be confiugured with openvpn to auto-connect to my VPN server > > when > > it starts. > > > > The client-to-server connection is used to make available a video library > > to the > > remo

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-20 Thread tincantech via Openvpn-users
onmail.com - 0x09BC3D44.asc.sig Description: PGP signature _______ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-20 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sent with Proton Mail secure email. On Saturday, January 20th, 2024 at 11:05 PM, tincantech via Openvpn-users wrote: > Hi, > > On Saturday, January 20th, 2024 at 6:57 PM, Bo Berglund bo.bergl...@gmail.com > wrote: > >

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-21 Thread André via Openvpn-users
Sent with Proton Mail secure email. On Sunday, January 21st, 2024 at 10:39, Bo Berglund wrote: > On Sun, 21 Jan 2024 03:21:40 +, tincantech via Openvpn-users > openvpn-users@lists.sourceforge.net wrote: > > > For posterity: > > > > Server log --verb 4: &g

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-21 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, On Sunday, January 21st, 2024 at 1:42 PM, Bo Berglund wrote: > I looked around and found this File: > > /lib/systemd/system/openvpn-server@.service That is the openvpn server unit file. > Can I edit this file and rem

Re: [Openvpn-users] Can a configuration item be cleared in the server.conf file

2024-01-21 Thread tincantech via Openvpn-users
> but which does not deal with that, so I am continuing separately here. > > The issue: > -- > Inside the globally set openvpn server configuration this item is defined: > --suppress-timestamps > > This means that all server instances will get this set even though it

Re: [Openvpn-users] Can a configuration item be cleared in the server.conf file

2024-01-21 Thread tincantech via Openvpn-users
gt; level > > to disable that setting such that the timestamps are returned to the > > logfiles? > > Like: > > "reset suppress-timestamps" > > or similar? > > > OpenVPN does not assume to be called from something that sets undesired > variable

Re: [Openvpn-users] Two questions about key generation for clients

2024-01-22 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, On Monday, January 22nd, 2024 at 11:23 PM, David Sommerseth wrote: > On 21/01/2024 17:34, tincantech via Openvpn-users wrote: > > > > > Can I edit this file and remove the item --suppress-timestamps to possibly > >

Re: [Openvpn-users] OpenVPN on port 443

2024-01-24 Thread Hans via Openvpn-users
How about using stunnel instead? From: "Gert Doering" mailto:g...@greenie.muc.de>> Date: Wednesday, 24 January 2024 at 13:03:30 To: "Peter Davis" mailto:peter.davis1...@proton.me>> Cc: "openvpn-users@lists.sourceforge.net" mailto:openvpn-users@lists.sou

<    1   2   3   4   5   6   7   8   9   >