Re: [Openvpn-users] Two questions about key generation for clients

2024-01-25 Thread André via Openvpn-users
Hi, My unit files are in /usr/lib/systemd/system/ sudo systemctl list-unit-files|grep openvpn openvpn-client@.service disableddisabled openvpn-server@.service . . sudo systemctl edit --full openvpn-server@.service After edit

[Openvpn-users] OpenVPN for retro network

2024-02-15 Thread shadowbladeee via Openvpn-users
Hello List, I working on some unconventional setup for RETRO OSes... The setup is: -- openvpn -- internet -- openvpn -- retro network The servers range from old versions of Novell Netware like 2.x 3.x 4.x, Solaris, Windows NT and alikes running old protocols like ipx/spx and some even use

Re: [Openvpn-users] Client history

2024-02-21 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, On Wednesday, 21 February 2024 at 06:59, Peter Davis via Openvpn-users wrote: > Hi, > I got the following error: > > # sh /etc/openvpn/scripts/script-events.sh > /etc/openvpn/scripts/script-events.sh: 6: [: ==: unexpected

[Openvpn-users] key length

2024-02-21 Thread Hans via Openvpn-users
Dear all, Last week i got a reminder, that (at least in Germany by the BSI ) the minimum key-length has been changed to 3072 bits. And before someone is going to mention it: yes, I know that according to NIST, 2K keys could be used until 2030 So, can Openvpn handle keys longer than 2K? Met

Re: [Openvpn-users] key length

2024-02-21 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, On Wednesday, 21 February 2024 at 14:39, Hans via Openvpn-users wrote: > Dear all, > > Last week i got a reminder, that (at least in Germany by the BSI ) the > minimum key-length has been changed to 3072 bits. > > And

Re: [Openvpn-users] key length

2024-02-21 Thread Hans via Openvpn-users
From: "Gert Doering" mailto:g...@greenie.muc.de>> Date: Wednesday, 21 February 2024 at 18:24:43 To: "Witvliet, J, Ing." mailto:j.witvl...@mindef.nl>> Cc: "openvpn-users@lists.sourceforge.net" mailto:openvpn-users@lists.sourceforge.net>> Subject:

Re: [Openvpn-users] Strange case of "MULTI: bad source address from client"

2024-04-28 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, On Thursday, 25 April 2024 at 08:51, Bruno Tréguier via Openvpn-users wrote: > Or am I > totally wrong about the possible cause? Yes, you are "totally wrong".. The packet is dropped because no route exists for the sour

Re: [Openvpn-users] Critical OpenVPN Zero-Day Flaws Affecting Millions of Endpoints Across the Globe

2024-05-13 Thread André via Openvpn-users
Hi, https://openvpn.net/security-advisories/ Sent with Proton Mail secure email. On Monday, May 13th, 2024 at 2:59 PM, Turritopsis Dohrnii Teo En Ming via Openvpn-users wrote: > Subject: Critical OpenVPN Zero-Day Flaws Affecting Millions of Endpoints > Across the Globe > > G

Re: [Openvpn-users] Critical OpenVPN Zero-Day Flaws Affecting Millions of Endpoints Across the Globe

2024-05-16 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, On Thursday, 16 May 2024 at 15:17, Gert Doering wrote: > Hi, > > On Thu, May 16, 2024 at 05:05:37PM +0300, M Mikky wrote: > > > It > > looks primarily like another attempt to combat the globally used OpenVPN, >

[Openvpn-users] TLS key negotiation failed to occur ISP screws up the VPN

2024-05-17 Thread shadowbladeee via Openvpn-users
Here is what I tried: 1, tried to move the udp port -> didn't help 2, switched from udp to tcp -> didn't help Anyone encountered similar situation? Thanks ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] TLS key negotiation failed to occur ISP screws up the VPN

2024-05-17 Thread shadowbladeee via Openvpn-users
s why I say this might be some blocking/slowdown/crapping coming from the isp. Time is correct on the machines, certs expire in 2049. Sent with Proton Mail secure email. On Friday, May 17th, 2024 at 12:38 PM, Antonio Quartulli wrote: > Hi, > > On 17/05/2024 14:12, shadowbladeee via

Re: [Openvpn-users] TLS key negotiation failed to occur ISP screws up the VPN

2024-05-17 Thread shadowbladeee via Openvpn-users
Nope and btw OpenVPN does not care about the CRL unless you specifically define it in the config. I even use the same CA, client cert as on the other openvpn node on this host on other port so even that issue is excluded. The fact that it worked for years and now misbehaves with no reason the

Re: [Openvpn-users] TLS key negotiation failed to occur ISP screws up the VPN

2024-05-18 Thread shadowbladeee via Openvpn-users
Hello, I can even send data on that udp port with netcat between the two like: netcat -ul 43000 ewqeqw kek lel test dah This node where the logs were from (server): OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019

Re: [Openvpn-users] TLS key negotiation failed to occur ISP screws up the VPN

2024-05-19 Thread shadowbladeee via Openvpn-users
n't tell you that 2.4.0 is > > >8 years old, and a zillion improvements went into what is now 2.6.10, > > > > Just curious: > > I am running openvpn server on an Ubuntu 22.04.4 LTS and here is what I get > > from > > apt:

[Openvpn-users] (reversed) proxy

2024-05-22 Thread Hans via Openvpn-users
Hi all, At the openvpn client side it is possible to use http-encapsulation, For instance, we use in our client-config: (snip) http-proxy url-site-A 443 remote url_vpn-XXX tcp http-proxy url-site-A 443 remote url_vpn-XXX tcp http-proxy url-site-A 443 remote url_vpn-YYY

Re: [Openvpn-users] (reversed) proxy

2024-05-22 Thread Hans via Openvpn-users
Hallo Jan, From: Jan Just Keijser Sent: Wednesday, May 22, 2024 2:19 PM To: Witvliet, J, Ing., COMMIT/JIVC/GII/TEAM ITT ; openvpn-users@lists.sourceforge.net Subject: Re: [Openvpn-users] (reversed) proxy Hoi Hans, On 22/05/2024 12:41, Hans via Openvpn-users wrote: Hi all, At the openvpn

Re: [Openvpn-users] what keys/certificates I as a openvpn client need to generate?

2024-06-17 Thread tincantech via Openvpn-users
e examples I found were > more concentrated for the server side setup. > > So I would need to be connected to an openvpn server not hosted by me and the > owner of the server asked me to send my credentials for the server key. Your "owner of the server" must clarify "

Re: [Openvpn-users] Relation of OpenVPN to the system's primary IP address

2024-07-07 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi On Sunday, 7 July 2024 at 23:33, Leroy Tennison via Openvpn-users wrote: > Was working on a remote system (a local NIC on a network not associated with > the one I was on and the OpenVPN tun interface) with a request to change the &

Re: [Openvpn-users] New OVPN server, can I still use easyrsa 3.1.5?

2024-10-29 Thread tincantech via Openvpn-users
ukcL9OenxowUO5UogZXgVAoLc3JQGor1nuYrHG7sQeCNGPfrj2g5wA== =D5qk -END PGP SIGNATURE- publickey - tincantech@protonmail.com - 0x09BC3D44.asc Description: application/pgp-keys publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig Description: PGP signature ___ Openvpn-users

Re: [Openvpn-users] hide openvpn traffic completely

2024-11-19 Thread Hans via Openvpn-users
How about feeding OpenVPN through Stunnel? From: "Gert Doering" mailto:g...@greenie.muc.de>> Date: Tuesday, 19 November 2024 at 17:53:32 To: "sergio" mailto:ser...@outerface.net>> Cc: "Tincantech via Openvpn-users" mailto:openvpn-users@lists.sourcefor

[Openvpn-users] Easy-RSA CVE Announcment

2025-02-03 Thread tincantech via Openvpn-users
Full details: * https://community.openvpn.net/openvpn/wiki/CVE-2024-13454 Bug report: * https://github.com/OpenVPN/easy-rsa/issues/1122 Thanks are given to the help and guidance received, while confirming this CVE. If there are further questions then please feel free to ask. Kind Regards Richard Bon

Re: [Openvpn-users] easyrsa build-ca does not use my var file

2025-02-04 Thread tincantech via Openvpn-users
; > This is not what I had defined in ~/esay-rsa/vars. > > Any pointers on how to get this working will be appreciated. > > Kind regards, > > Bruce > > > > ___ > Openvpn-users mailing list > Openvpn-users@list

Re: [Openvpn-users] Migrating OpenVPN server - easyrsa question...

2025-04-05 Thread tincantech via Openvpn-users
red openly. Easy-RSA will also create an inline file for OpenVPN use but be aware of the security aspect outlined above. Easy-RSA places the inline files into either the pki/inline or pki/inline/private folders. Commands `build-x-full` are simply commands `gen-req` and `sign-req` chained together, fo

Re: [Openvpn-users] Migrating OpenVPN server - easyrsa question...

2025-02-17 Thread tincantech via Openvpn-users
> Can I just copy over the directory tree in $HOME/openvpn where all the > management stuff resides and then replace easyrsa with the now latest version > from Github (3.2.2) without editing my scripts that use easyrsa? Yes, copy your data and upgrade to Easy-RSA v 3.2.2 - That is support

Re: [Openvpn-users] Created new OVPN server based on old, getting strange error message when connecting

2025-03-29 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 First, thank you David, for your help. Also, see below for how Easy-RSA can help, however you choose to deploy your VPN. For OpenVPN peer-fingerprint mode: Please note, Easy-RSA 3.2.2 also has commands: `self-sign-server` and `self-sign-client

Re: [Openvpn-users] How to use easyrsa 3.2.2 on new server - questions

2025-03-29 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Sat, 29 Mar 2025 10:41:38 +0100, Bo Berglund wrote: > >But I am struggling to understand the concepts still. Some help: https://github.com/OpenVPN/easy-rsa/blob/master/doc/Intro-To-PKI.md > >I tried the section I feel is most s

[Openvpn-users] IPv6 Routing Issue Behind OpenVPN on OpenBSD with ISP-Delegated /64

2025-06-24 Thread michael.davis303 via Openvpn-users
Hi everyone, I'm running an OpenVPN server on OpenBSD where clients connect over IPv4 and are assigned IPv6 addresses (IPv6-in-IPv4 tunnel). My ISP delegates a full /64 range (:::::/64), but only the address configured at boot via autoconf (::::92::1/6

Re: [Openvpn-users] How do I choose a specific Server Certificate?

2025-07-12 Thread tincantech via Openvpn-users
it with a specific certificate for your OpenVPN server. 1. Ensure You're in the Easy-RSA Directory: Make sure you’re inside the Easy-RSA directory (i.e., /etc/openvpn/easy-rsa/). cd /etc/openvpn/easy-rsa 2. Generate a Client Key Request: You’ll need to generate the certificate signing reques

[Openvpn-users] Android DNS double connect bug

2025-06-25 Thread shadowbladeee via Openvpn-users
would be ok using dnsmasq on Android directly or even hosts file but sadly this cannot be done on unrooted phone :/ Thanks ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

[Openvpn-users] ipv6 openvpn

2017-08-04 Thread Stefan Szabo via Openvpn-users
Hi, We have two openvpn servers both use ipv6 pool and ipv6 routes. The problem is: Openvpn clients which dont have ipv6 enable on their PC, cannot establish vpn connection, beacause ipv6. Is there any workaround in order to NOT disable ipv6 on the server side, and ipv4 clients be

[Openvpn-users] arp over routed VPN

2017-11-09 Thread Daniel Miller via Openvpn-users
http://sdm.link/slashdot _______ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] tcp-client: large ping during transfers (fwd)

2017-11-10 Thread Adam Wysocki via Openvpn-users
on reaches very high levels of > utilization, latencies increase dramatically. > > So, the fact that OpenVPN does similar things seems unremarkable to me. > [But perhaps I missed something more in the thread that does make it > more remarkable...] The problem is that my link

[Openvpn-users] Windows client sometimes needs manual ipconfig

2017-11-15 Thread Daniel Miller via Openvpn-users
Windows 8.1, OpenVPN 2.4 (GUI v11.9.0.0).  Sometimes when connecting, especially when re-connecting, my connections won't fully initialize.  However, it often seems that a manual "ipconfig /renew " fixes it.  So much so that I'm considering add a "up" command to my

[Openvpn-users] Tunnel between a WinXP and a Linux box

2017-12-15 Thread Walter H. via Openvpn-users
Hi folks, WinXP uses the latest package from here: https://openvpn.net/index.php/download/community-downloads.html ( OpenVPN 2.3.18 ) and the Linux box is a CentOS 6 that uses the RPM package from EPEL ( OpenVPN 2.4.4 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4

Re: [Openvpn-users] Tunnel between a WinXP and a Linux box

2017-12-16 Thread Walter H. via Openvpn-users
I know what I wrote, what's your answer? Thanks, Walter On 15/12/17 11:01:14, David Sommerseth wrote: On 15/12/17 11:07, Walter H. via Openvpn-users wrote: Hi folks, WinXP uses the latest package from here: https://openvpn.net/index.php/download/community-downloads.html ( Op

[Openvpn-users] dd-wrt router openVPN server version and client version must be the same?

2018-05-13 Thread James Peng via Openvpn-users
Hello everybody, I have bought an used Linksys E4200 version 1 router and was told the openVPN was installed already. Now I am trying to set it up. I need to install a client on my computer and generate those files. which client version should I install on my computer? The same version as

Re: [Openvpn-users] dd-wrt router openVPN server version and client version must be the same?

2018-05-13 Thread James Peng via Openvpn-users
My router openVPN is v2.4.3. I guess I can use the latest client on my computer to work with it. Thanks, James -Original Message- From: Magnus Kroken [mailto:mkro...@gmail.com] Sent: Sunday, May 13, 2018 8:01 PM To: James Peng Cc: openvpn-users@lists.sourceforge.net Subject: Re

[Openvpn-users] cannot connect to server from outside of my home network

2018-05-21 Thread James Peng via Openvpn-users
I am now testing my my dd-wrt router OpenVPN server. Inside my home network, I can connect to my OpenVPN server without any problem. But from the outside, I cannot connect to the server. It seems the sever found something wrong and refused the connection: Mon May 21 20:29:40 2018 us=413432

[Openvpn-users] conneced but no internet access

2018-05-23 Thread James Peng via Openvpn-users
For a quick temporary experiment solution I will use this DD-WRT router as OpenVPN server. I can connect to the OpenVPN server now but I cannot access any websites. I can receive email via MS outlook but cannot send. By looking at the server log, it says: " 20180523 13:34:50 I TUN/TAP d

Re: [Openvpn-users] conneced but no internet access

2018-05-23 Thread James Peng via Openvpn-users
src 169.254.255.1 192.168.1.0/24 dev br0 proto kernel scope link src 192.168.1.1 192.168.66.0/24 dev tun2 proto kernel scope link src 192.168.66.1 209.6.112.0/20 dev vlan2 proto kernel scope link src 209.6.118.107 -Original Message- From: James Peng via Openvpn-users

[Openvpn-users] which google play openVPN client should I use?

2018-05-31 Thread James Peng via Openvpn-users
I found there are more than one openVPN client app on the Google Play store. Which one should I use? Thanks, James -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdo

[Openvpn-users] can I use a client key set in multiple devices?

2018-06-30 Thread James Peng via Openvpn-users
Hello there, I have a working OpenVPN client and server. Now my family members are also need this vpn connection. I only have 3 client key sets. Can I use one client key set in multiple devices? If yes, can they connect to the server at the same time? The server will not be confused

[Openvpn-users] how generate more client key set in windows

2018-06-30 Thread James Peng via Openvpn-users
Hello there, I have setup my OpenVPN client and server several weeks ago. They are working fine. Now I need more client key sets. I lost my vars.bat from last time because I have issued the "init-config". With a different vars.bat file, the new client key sets will not be compa

[Openvpn-users] how to force all internet traffic go through my vpn tunnel

2018-07-02 Thread James Peng via Openvpn-users
Hello everybody, I have my OpenVPN server running on my Linksys-E4200 router. The VPN server local ip is 192.168.66.1. Now I am in the public library. My Windows7 OpenVPN client has connected with the OpenVPN server. When I use tracert to see the traffic for some unpopular websites on a

[Openvpn-users] add "redirect-gateway def1" parameter to the client's config file?

2018-07-03 Thread James Peng via Openvpn-users
Hello there, There is a question on the serverfault site about "How to set OpenVPN client to force traffic through VPN Server?" (https://serverfault.com/questions/898776/how-to-set-openvpn-client-to-force -traffic-through-vpn-server?rq=1 ) In the answer's comment section, s

[Openvpn-users] OpenVPN for Android, how to apply client.ovpn?

2018-07-04 Thread James Peng via Openvpn-users
Hello, I cannot find where to import my OpenVPN client config file, client.ovpn, to the OpenVPN for Android app. Anybody can help me about this? Thanks, James -- Check out the vibrant tech community on one of

[Openvpn-users] change vpn port number

2018-07-07 Thread James Peng via Openvpn-users
Hello, Can I change my personal openVPN server's the default port number? How about 8080 to make it looks like a webserver? Thanks, James -- Check out the vibrant tech community on one of the world&#

Re: [Openvpn-users] change vpn port number

2018-07-09 Thread James Peng via Openvpn-users
-Original Message- From: David Sommerseth [mailto:open...@sf.lists.topphemmelig.net] Sent: Sunday, July 08, 2018 5:55 PM To: James Peng ; openvpn-users@lists.sourceforge.net Subject: Re: [Openvpn-users] change vpn port number On 08/07/18 05:07, James Peng via Openvpn-users wrote: > Hello, > &

[Openvpn-users] OpenVPN's WAN Miniport(PPTP), VPN Client Adapter and TAP-Windows Adapter V9

2018-07-09 Thread James Peng via Openvpn-users
Hello there, I am still struggle with my Windows 7 VPN client's internet access. My OpenVPN client-server works great for my Windows 10 laptop and my Android phones. But my Windows 7 laptop cannot gain internet access with the VPN connection. I have tried OpenVPN 3 years ago. I have

[Openvpn-users] please help me to find out why my Win7 client doesn't have web site access

2018-07-11 Thread James Peng via Openvpn-users
Hello there, this email was too long with the client log in the message body. Now it is on another email with the same subject ending with 2. I am still struggle with my Windows 7 VPN client's internet access. My OpenVPN client-server works great for my Windows 10 laptop a

[Openvpn-users] please help me to find out why my Win7 client doesn't have web site access --- 2

2018-07-11 Thread James Peng via Openvpn-users
.link/slashdot___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

[Openvpn-users] please help me to find out why my Win7 client doesn't have web site access --- b2

2018-07-11 Thread James Peng via Openvpn-users
.link/slashdot___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] please help me to find out why my Win7 client doesn't have web site access

2018-07-11 Thread James Peng via Openvpn-users
rom: Gert Doering [mailto:g...@greenie.muc.de] Sent: Wednesday, July 11, 2018 11:07 AM To: James Peng Cc: openvpn-users@lists.sourceforge.net Subject: Re: [Openvpn-users] please help me to find out why my Win7 client doesn't have web site access Hi, On Wed, Jul 11, 2018 at 10:58:02AM -0400, Ja

[Openvpn-users] ip address is blocked due to the use of vpn

2018-07-21 Thread James Peng via Openvpn-users
Hello Everyone, I was successfully set up an OpenVPN client-server with your help few weeks ago. Now I am traveling outside USA. I was able to use my private VPN to search online resources (only technology resources) which are helpful to my job in the first few days trip. Now my ip address was

Re: [Openvpn-users] ip address is blocked due to the use of vpn

2018-07-22 Thread James Peng via Openvpn-users
: Sunday, July 22, 2018 7:32 PM To: oldyounggu...@yahoo.com Subject: Re: [Openvpn-users] ip address is blocked due to the use of vpn Next time, try setting up tor first, and do the vpn through the onion network. Sent from my iPhone On 22 Jul 2018, at 06:14, James Peng via Openvpn-users

[Openvpn-users] Routing vs NAT for VPN server inside gateway

2019-01-14 Thread Daniel Miller via Openvpn-users
I have a configuration that probably should be listed in the examples/FAQ - but I'm not seeing what I need. OpenVPN server is running on a host in the corporate LAN.  Using TUN/Routed mode.  VPN server has a LAN IP of 192.168.0.2 and a VPN IP of 10.0.0.1.  This server also provides DNS &

Re: [Openvpn-users] Routing vs NAT for VPN server inside gateway

2019-01-20 Thread Daniel Miller via Openvpn-users
On 1/16/2019 6:25 AM, Jan Just Keijser wrote: Hi, On 14/01/19 23:04, Daniel Miller via Openvpn-users wrote: I have a configuration that probably should be listed in the examples/FAQ - but I'm not seeing what I need. In theory, what you are asking is definitely possible, with proper ro

Re: [Openvpn-users] Routing vs NAT for VPN server inside gateway

2019-01-30 Thread Daniel Miller via Openvpn-users
one.  Do I need to run multiple instances to capture both? -- Daniel ___________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] Routing vs NAT for VPN server inside gateway

2019-01-31 Thread Daniel Miller via Openvpn-users
On 1/31/2019 1:01 AM, Jan Just Keijser wrote: Hi, it is probably easiest to run it on the tun0 interface, as you will capture less non-relevant traffic. Set up the tshark/tcpdump filter, then run a 'ping' from the OpenVPN client to the server-side LAN GW straight after the conn

[Openvpn-users] OpenVPN & Quagga/Zebra

2019-01-31 Thread Daniel Miller via Openvpn-users
I may open a bug with Ubuntu (my server is on Bionic) but a recent re-boot after some config changes may have exposed something.  This isn't an OpenVPN bug - rather known OpenVPN behavior that may catch others so I'm sharing. Having installed packages quagga-ospfd & quagga-cor

Re: [Openvpn-users] OpenVPN & Quagga/Zebra

2019-02-03 Thread Daniel Miller via Openvpn-users
On 2/3/2019 8:36 AM, David Sommerseth wrote: On 01/02/2019 01:35, Daniel Miller via Openvpn-users wrote: I may open a bug with Ubuntu (my server is on Bionic) but a recent re-boot after some config changes may have exposed something.  This isn't an OpenVPN bug - rather known OpenVPN beh

[Openvpn-users] restrict devices connecting to openvpn by mac address

2019-07-23 Thread Stefan Szabo via Openvpn-users
hi, is there any posibility to restrict users connecting to openvpn server, permit only those who uses devices provided by company?and how can be acomplished this? after check the cert and also LDAP goup to perform another check(post-auth) and use something like mac address or anything else to

[Openvpn-users] Option error - [PUSH-OPTIONS]:1: remote-gateway (2.4.7)

2019-07-26 Thread Stefan Szabo via Openvpn-users
teway (2.4.7)___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] restrict devices connecting to openvpn by mac address

2019-07-26 Thread Stefan Szabo via Openvpn-users
post-auth module for building a script to check for the hardware ID.   On 7/23/2019 6:54 PM, Selva Nair wrote: > Hi, > > On Tue, Jul 23, 2019 at 9:50 AM Stefan Szabo via Openvpn-users > wrote: >> hi, >> >> is there any posibility to restrict users connecting to o

[Openvpn-users] What's wrong with this "up" configuration?

2019-08-01 Thread Leroy Tennison via Openvpn-users
If i put the following in my client configuration file: up /tmp/openvpn-test OpenVPN won't start. openvpn-test is world-readable and contains: #!/bin/bash/bin/echo "$1 $2 $3" > /tmp/openvpn-showexit 0 What am I doing wrong?  Th

[Openvpn-users] What's wrong with this "up" configuration? Part 2.

2019-08-06 Thread Leroy Tennison via Openvpn-users
I don't know what happened to my last response but the problem was systemd, using "systemctl start openvpn@leroy" with "verb 6" produced Options error: --up script fails with '/tmp/openvpn-test': No such file or directory However, "ls -al /tmp/openvp

[Openvpn-users] Tricky Problem: Connect to LAN Computers via SMB

2019-10-02 Thread Lionel Fusco via Openvpn-users
Hello, As the subject line, this has been an elusive problem for me the past 24 hours. Background: I have a server (pivpn) as a openVPN server. It works! I have 4-5 other clients that connect to it as expected, and I have LAN SMB access--regardless of whatever network I am connected to, Android

Re: [Openvpn-users] Tricky Problem: Connect to LAN Computers via SMB

2019-10-03 Thread Lionel Fusco via Openvpn-users
3/19 12:24 AM, Lionel Fusco via Openvpn-users wrote: > Hello, > > As the subject line, this has been an elusive problem for me the past 24 > hours. > > Background: > I have a server (pivpn) as a openVPN server. It works! I have 4-5 other > clients that connect to it as exp

[Openvpn-users] VPN - SMB transfers hellaciously slow

2019-10-04 Thread Lionel Fusco via Openvpn-users
iles I would like to access from anywhere. I have a cloud setup already, but the downside with that is that it mirrors everything, and I don't want my limited laptop space to be used. I can access them via a web interface, but not in the "simply" SMB way. ______

[Openvpn-users] Communicating to OpenVPN

2019-11-03 Thread Leroy Tennison via Openvpn-users
I previously believed that all IP network communication was done at layer 2 via arp and transmitting to the MAC address of the system responding for it's IP address.  Then I realized that OpenVPN doesn't have MAC addresses, so how does communication coming into an OpenVPN server

[Openvpn-users] OpenVPN-2.4.8 running on new hardware, but is it using the CPU based hardware crypto?

2019-11-07 Thread Ralf Hildebrandt via Openvpn-users
We're (finally) running OpenVPN-2.4.8 on new(er) hardware. How can we see if it is using the CPU based hardware crypto? Nov 7 16:00:21 openvpn2019 tcp[704]: OpenVPN 2.4.8 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Oct 30 2019 Nov 7 16:

Re: [Openvpn-users] [ext] Re: OpenVPN-2.4.8 running on new hardware, but is it using the CPU based hardware crypto?

2019-11-07 Thread Ralf Hildebrandt via Openvpn-users
> Your OpenVPN is linked against OpenSSL; the hardware crypto comes from the > openssl library, which nowadays almost always uses the hardware crypto > (aesni) stuff.  You can verify it using an openssl command: ... > If the results or the two above commands are equal, then

[Openvpn-users] Openvpn on virtualbox

2019-11-11 Thread Ralf Hildebrandt via Openvpn-users
We used to run Openvpn-2.4.8 on bare metal (old hardware), but currently we're running Openvpn-2.4.8 in a VM on a virtualbox host system. With the same software we're seeing excessive CPU consumption by the UDP based openvpn process. Symptoms are high latency when using interactive

Re: [Openvpn-users] [ext] Re: Openvpn on virtualbox

2019-11-11 Thread Ralf Hildebrandt via Openvpn-users
er environment, I'd suggest a > type 1 hypervisor. ESXi 6.x Free is a good choice and I've run many > OpenVPN installs on it with good results, Thanks. Ralf Hildebrandt Charité - Universitätsmedizin Berlin Geschäftsbereich IT | Abteilung Netzwerk Campus Benjamin Franklin (CBF) Haus I

Re: [Openvpn-users] Communicating to OpenVPN

2019-11-11 Thread Leroy Tennison via Openvpn-users
That is an impressive diagram, I'm going to have to spend some time working through it - thank you. -Original Message- From: Pippin To: Leroy Tennison Cc: openvpn-users Sent: Mon, Nov 11, 2019 6:33 am Subject: Re: [Openvpn-users] Communicating to OpenVPN Hi, Maybe this diagra

[Openvpn-users] Problems getting client-connect script to run

2019-12-28 Thread Leroy Tennison via Openvpn-users
Running OpenVPN 2.3.10 on Ubuntu 16.04 using a working configuration with only the "script-security" and "client-connect" lines added.  Starting the OpenVPN server with systemctl starts it successfully and a client can connect but the client-connect script doesn't run

Re: [Openvpn-users] Problems getting client-connect script to run

2019-12-31 Thread Leroy Tennison via Openvpn-users
cript but, with a working configuration I don't have the time luxury to troubleshoot that. Thank you for your help, I certainly appreciate it. -Original Message- From: Jan Just Keijser To: Leroy Tennison ; openvpn-users Sent: Sun, Dec 29, 2019 10:33 am Subject: Re: [Openvpn-users

[Openvpn-users] Disconnecting often

2020-01-20 Thread John Reese via Openvpn-users
I really like VPN and OpenVPN conceptually. I have this weird issue though, on my Android OpenVPN, where I drop the connection fairly often. Is there a setting (client/server) where I can meditate that? Not having internet (unbeknownst) is not practical =( Thanks

Re: [Openvpn-users] OpenVPN with Google MFA

2020-01-21 Thread Bogdan Rudas via Openvpn-users
Hello Peter! I don't see any docs but probably can give you a directions: 1. Build OpenVPN with PAM auth support 2. Configure PAM with Google 2FA support - there are some libraries for that on Github. On Thu, Jan 16, 2020 at 8:56 PM Peter Fraser wrote: > Hi All > > I have been

[Openvpn-users] Multiple DNS search suffixes on Windows

2020-02-29 Thread Leroy Tennison via Openvpn-users
d the last one applies, I don't see another dhcp-option such as DOMAIN-SEARCH.  Any options would be much appreciated.  Thanks._______ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] Multiple DNS search suffixes on Windows

2020-03-01 Thread Leroy Tennison via Openvpn-users
Thanks for the reply - you saved me the frustration and time of trying to find a non-existent solution. -Original Message- From: Gert Doering To: Leroy Tennison Cc: openvpn-users Sent: Sun, Mar 1, 2020 1:15 am Subject: Re: [Openvpn-users] Multiple DNS search suffixes on Windows Hi

Re: [Openvpn-users] Multiple DNS search suffixes on Windows

2020-03-01 Thread Leroy Tennison via Openvpn-users
Interesting - wasn't aware of that.  So even if OpenVPN added the feature it might not work... -Original Message- From: Selva Nair To: Gert Doering Cc: Leroy Tennison ; openvpn users list (openvpn-users@lists.sourceforge.net) Sent: Sun, Mar 1, 2020 9:29 am Subject: Re: [Op

[Openvpn-users] First time set up using openvpn

2020-04-03 Thread The Doctor via Openvpn-users
All right. Trying to set up a radius based authentication openvpn on Freebsd 12.! . Server file: - local 192.168.81.1 port 1194 proto udp dev tun ca /usr/local/etc/openvpn/server/ca.crt cert /usr/local/etc/openvpn/server/issued

Re: [Openvpn-users] First time set up using openvpn

2020-04-03 Thread The Doctor via Openvpn-users
This file is secret" > could be better explained as > "# This file is shared secret" > > HTH > tct > > > On 04/04/2020 00:30, The Doctor via Openvpn-users wrote: > > All right. > > > > Trying to se

Re: [Openvpn-users] First time set up using openvpn

2020-04-03 Thread The Doctor via Openvpn-users
On Fri, Apr 03, 2020 at 08:47:36PM -0600, The Doctor via Openvpn-users wrote: > On Sat, Apr 04, 2020 at 01:59:43AM +0100, tincanteksup wrote: > > Hi Doctor, > > > > HMAC indicates that your --tls-auth settings are incorrect. > > > > I point out the fault below. &

Re: [Openvpn-users] First time set up using openvpn

2020-04-04 Thread The Doctor via Openvpn-users
On Sat, Apr 04, 2020 at 09:24:24AM +0200, Gert Doering wrote: > Hi, > > On Fri, Apr 03, 2020 at 05:30:23PM -0600, The Doctor via Openvpn-users wrote: > > tls-auth /usr/local/etc/openvpn/server/ta.key 0 # This file is secret > > If you have this on the server... > >

Re: [Openvpn-users] First time set up using openvpn

2020-04-04 Thread The Doctor via Openvpn-users
: > > tls-crypt tls-crypt.key > > In client.conf: > > > [[[ THE CONTENTS OF THE KEY OF tls-crypt.key - USING INLINE IS GOOD ]]] > > Got you. What about generating tls-crypt.key? > > Cheers, > > Tom > > -Original Message- > From:

Re: [Openvpn-users] First time set up using openvpn

2020-04-04 Thread The Doctor via Openvpn-users
mmon-name > > plugin /lib64/openvpn/plugins/openvpn-plugin-auth-pam.so "openvpn login > USERNAME password PASSWORD " > > (note: you might need the finetune the plugin path) > Got you. > In client.conf 'auth-user-pass' in enogh. > > Once you've

Re: [Openvpn-users] First time set up using openvpn

2020-04-04 Thread The Doctor via Openvpn-users
n President Republic!Beware AntiChrist rising! https://www.empire.kred/ROOTNK?t=94a1f39b Look at Psalms 14 and 53 on Atheism Those who cannot win on facts rely upon slander. -unknown _______ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] First time set up using openvpn

2020-04-04 Thread The Doctor via Openvpn-users
age----- > From: The Doctor via Openvpn-users > [mailto:openvpn-users@lists.sourceforge.net] > Sent: Saturday, April 4, 2020 4:07 PM > To: Gert Doering > Cc: openvpn-users@lists.sourceforge.net > Subject: Re: [Openvpn-users] First time set up using openvpn > > On Sat, A

[Openvpn-users] Completing the VPN Re: First time set up using openvpn

2020-04-04 Thread The Doctor via Openvpn-users
tls-crypt in place of tls-auth did the trick. However routing and gateway seems to be non-functional. So the working server file is - local 192.168.81.1 port 1194 proto udp dev tun ca /usr/local/etc/openvpn/server/ca.crt

Re: [Openvpn-users] Completing the VPN Re: First time set up using openvpn

2020-04-04 Thread The Doctor via Openvpn-users
just check the > clients routing table) > That did the trick!! > Cheers, > > Tom > > > -Original Message- > From: The Doctor [mailto:doc...@doctor.nl2k.ab.ca] > Sent: Saturday, April 4, 2020 9:58 PM > To: Dajka Tam?s ; 'openvpn users list'

Re: [Openvpn-users] Completing the VPN Re: First time set up using openvpn

2020-04-04 Thread The Doctor via Openvpn-users
erver -- local 192.168.81.1 port 1194 proto udp dev tun ca /usr/local/etc/openvpn/server/ca.crt cert /usr/local/etc/openvpn/server/issued/server.crt key /usr/local/etc/openvpn/server/private/server.key dh /usr/local/etc/openvpn/server/dh.pem topology subnet server 10.8.0.0 255.25

Re: [Openvpn-users] Completing the VPN Re: First time set up using openvpn

2020-04-05 Thread The Doctor via Openvpn-users
On Sat, Apr 04, 2020 at 06:11:47PM -0600, The Doctor via Openvpn-users wrote: > And I wonder if Windows is gving me attitude. > > When I coneect , I can > ping numerical IPs but > won't resolve into Domain names. > > Further some ofthe client are using the ethernet co

[Openvpn-users] 'Routers' as openvpn clients

2020-04-27 Thread The Doctor via Openvpn-users
rist rising! https://www.empire.kred/ROOTNK?t=94a1f39b Look at Psalms 14 and 53 on Atheism Small opportunities are often the beginning of great enterprises. -Demosthenes ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net h

[Openvpn-users] OpenVPN architecture

2020-04-28 Thread Leroy Tennison via Openvpn-users
Is OpenVPN architecture similar to HTTPS where the certificate, etc. is used to encrypt and transmit a symmetric key which is then used for all future communication?___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https

[Openvpn-users] cipher selection

2020-04-28 Thread Leroy Tennison via Openvpn-users
e a way to migrate an existing situation to a stronger cipher? I noticed that 2.4+ has a negotiation option, is that on by default?  The documentation is rather terse about this feature._______ Openvpn-users mailing list Openvpn-users@lists.sourceforge

[Openvpn-users] Checking OpenVPN connectivity

2020-04-28 Thread Leroy Tennison via Openvpn-users
isibility or control) was "in place" before attempting to do so._______ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: [Openvpn-users] cipher selection

2020-04-29 Thread Leroy Tennison via Openvpn-users
Thank you, you've given me options to try, I appreciate it. -Original Message- From: Gert Doering To: Leroy Tennison Cc: openvpn-users Sent: Wed, Apr 29, 2020 12:50 am Subject: Re: [Openvpn-users] cipher selection Hi, On Tue, Apr 28, 2020 at 10:23:10PM +, Leroy Tenniso

Re: [Openvpn-users] cipher selection

2020-04-29 Thread Leroy Tennison via Openvpn-users
e- From: Gert Doering To: Leroy Tennison Cc: openvpn-users Sent: Wed, Apr 29, 2020 12:50 am Subject: Re: [Openvpn-users] cipher selection Hi, On Tue, Apr 28, 2020 at 10:23:10PM +, Leroy Tennison via Openvpn-users wrote: > Server is 2.3.10, clients are "various" (but not o

<    1   2   3   4   5   6   7   8   9   >