Unable to generate OpenVPN client install packages

[teces]

Hello,

I'm trying to configure an OpenVPN Server with OPNsense and when I create clients I'm unable to get the client install packages.

I go to Client Export tab but no the client list to export is always empty.

What I'm doing wrong?

Thanks.

[franco]

Do you have users with assigned privileges for OpenVPN access and their certs assigned?

[teces]

Uff... I'm not sure how to do this...

I have createt an user under System->Access->Users
I have assigned this user Certificate created previously (with OpenVPN configuration wizard)

...what else? ...how do I assign privileges for OpenVPN?

Is there any guide or how-to configure an OpenVPN under OPNsense? ...I haven't found it and I'm recollecting information from PFsense and OpenVPN forums...

Thanks.

[brokenby2703]

Hi.

OpenVPN is giving me headache.

As per post of teces I'm not able to export .ovpn certificate.

In the VPN/OPENVPN/CLIENT EXPORT page there isn't any client list (see attachment).

I did follow this guide : https://www.kirkg.us/posts/building-an-openvpn-server-with-opnsense/

But Can't come out from there.

Anybody can help ?

Thanks

[AdSchellevis]

Quick question, do your users have certificates assigned?
(Access -> Users -> "User Certificates")

[teces]

Hello,

I'm here again...

I have done this steps...

1. Create a Certify Authentication (under System->Trust->Authorities)

2. Create a Server Certificate using Certify Authentication created in step before (under System->Trust->Certificates)

3. Create a Client Certificate (same as step 2 but creating a Client Certificate)

4. Create an instance of OpenVPN server, using CA and Server Certificate
    (after this last step I can start OpenVPN service)

5 Add user and assign it Client Certificate (I have to create an user, save it and after that modify it and assign Client Certificate)

6. Go to Client Export and create a zip file with standard configuration

7. With this file and OpenVPN client I try to connect (from other PC on another location) but I always get 'process started and then immediately exited: []'... I have looked at OpenVPN logs but there's nothing...

Any idea?

[teces]

Ok. I'm on the right way...

The first problem is the local port...

When I choose 'Use random local port' on Client Export, the .ovpn file adds the line 'lport 0' which gives the error 'Bad local port number: 0'... we need to assign another port or delete this line...

[AdSchellevis]

What client are you using? some older clients are known not to support this option.
We are using Viscosoty from sparklabs mostly (https://www.sparklabs.com/viscosity/), which doesn't seem to have an issue with "lport 0"

[teces]

I was triying to connect with OpenVPN Client but i haven't done it yet...

When I try to connect with OpenVPN GUI it Works perfectly... the problems is that I'm planning to use OpenVPN with some customers and I wanted anything more 'visual'...

I'm going to try with Viscosity... thanks...