OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • General Discussion »
  • OpenVPN
« previous next »
  • Print
Pages: [1]

Author Topic: OpenVPN  (Read 8233 times)

Tripple_Delta

  • Jr. Member
  • **
  • Posts: 91
  • Karma: 3
    • View Profile
OpenVPN
« on: November 20, 2016, 09:32:21 pm »
I'm trying for weeks to connect my Mint Linux laptop to my OPNsense box with OpenVPN with no luck.

I've been following this tutorial: https://www.kirkg.us/posts/building-an-openvpn-server-with-opnsense/

This is the last error I see in /var/log/openvpn.log:
Nov 20 21:21:08 firewall openvpn[44222]: TLS Error: cannot locate HMAC in incoming packet from [AF_INET]

Any idea where I make a mistake?
Logged

fabian

  • Hero Member
  • *****
  • Posts: 2769
  • Karma: 200
  • OPNsense Contributor (Language, VPN, Proxy, etc.)
    • View Profile
    • Personal Homepage
Re: OpenVPN
« Reply #1 on: November 21, 2016, 06:43:34 am »
HMAC is usually calculated using a digest algorithm like SHA-256. You may have a mismatch there.
Logged

Tripple_Delta

  • Jr. Member
  • **
  • Posts: 91
  • Karma: 3
    • View Profile
Re: OpenVPN
« Reply #2 on: November 21, 2016, 05:45:02 pm »
Maybe I should start with the first problem.
When I try to import the exported files (.ovpn, .p12 and .key) I get this error:
The file "...." could not be read or does not contain recognized VPN information.
Error: unknown error

Logged

fabian

  • Hero Member
  • *****
  • Posts: 2769
  • Karma: 200
  • OPNsense Contributor (Language, VPN, Proxy, etc.)
    • View Profile
    • Personal Homepage
Re: OpenVPN
« Reply #3 on: November 21, 2016, 09:00:03 pm »
you should try to run it on the command line: openvpn config.ovpn
Logged

Tripple_Delta

  • Jr. Member
  • **
  • Posts: 91
  • Karma: 3
    • View Profile
Re: OpenVPN
« Reply #4 on: November 22, 2016, 08:53:55 pm »
Almost there. Works with iPhone and iPad. This is the error on my linux laptop:
Tue Nov 22 20:40:30 2016 ERROR: Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1)
Tue Nov 22 20:40:30 2016 Exiting due to fatal error

Any ideas?
Logged

Tripple_Delta

  • Jr. Member
  • **
  • Posts: 91
  • Karma: 3
    • View Profile
Re: OpenVPN
« Reply #5 on: November 22, 2016, 09:42:44 pm »
Fixed.  :)
I needed sudo

This method is new to me. Maybe someone can point me in the right direction what's next.
The commond line seems to hang but it looks like that is the point where I have a working VPN connection. Is there a way to save this setup or do I always have to do it like this?
Logged

fabian

  • Hero Member
  • *****
  • Posts: 2769
  • Karma: 200
  • OPNsense Contributor (Language, VPN, Proxy, etc.)
    • View Profile
    • Personal Homepage
Re: OpenVPN
« Reply #6 on: November 23, 2016, 04:10:39 pm »
You can start the connection via systemd or NetworkManager on Linux. NetworkManager offers you the possibility to import your configuration.
Logged

Tripple_Delta

  • Jr. Member
  • **
  • Posts: 91
  • Karma: 3
    • View Profile
Re: OpenVPN
« Reply #7 on: November 23, 2016, 04:42:56 pm »
That's where things go wrong. I'm unable to import. I get an error.
Logged

fabian

  • Hero Member
  • *****
  • Posts: 2769
  • Karma: 200
  • OPNsense Contributor (Language, VPN, Proxy, etc.)
    • View Profile
    • Personal Homepage
Re: OpenVPN
« Reply #8 on: November 23, 2016, 06:19:30 pm »
On my computer I can import *.ovpn files. I use files in pem format for the key and the certificates. Maybe it is because of your p12 file.
Logged

Tripple_Delta

  • Jr. Member
  • **
  • Posts: 91
  • Karma: 3
    • View Profile
Re: OpenVPN
« Reply #9 on: November 23, 2016, 09:43:32 pm »
Could be, but I don't see an option what to export in the archive file.
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • General Discussion »
  • OpenVPN
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2024 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2