Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
General Discussion
»
OpenVPN
« previous
next »
Print
Pages: [
1
]
Author
Topic: OpenVPN (Read 8200 times)
Tripple_Delta
Jr. Member
Posts: 91
Karma: 3
OpenVPN
«
on:
November 20, 2016, 09:32:21 pm »
I'm trying for weeks to connect my Mint Linux laptop to my OPNsense box with OpenVPN with no luck.
I've been following this tutorial:
https://www.kirkg.us/posts/building-an-openvpn-server-with-opnsense/
This is the last error I see in /var/log/openvpn.log:
Nov 20 21:21:08 firewall openvpn[44222]: TLS Error: cannot locate HMAC in incoming packet from [AF_INET]
Any idea where I make a mistake?
Logged
fabian
Hero Member
Posts: 2769
Karma: 200
OPNsense Contributor (Language, VPN, Proxy, etc.)
Re: OpenVPN
«
Reply #1 on:
November 21, 2016, 06:43:34 am »
HMAC is usually calculated using a digest algorithm like SHA-256. You may have a mismatch there.
Logged
Tripple_Delta
Jr. Member
Posts: 91
Karma: 3
Re: OpenVPN
«
Reply #2 on:
November 21, 2016, 05:45:02 pm »
Maybe I should start with the first problem.
When I try to import the exported files (.ovpn, .p12 and .key) I get this error:
The file "...." could not be read or does not contain recognized VPN information.
Error: unknown error
Logged
fabian
Hero Member
Posts: 2769
Karma: 200
OPNsense Contributor (Language, VPN, Proxy, etc.)
Re: OpenVPN
«
Reply #3 on:
November 21, 2016, 09:00:03 pm »
you should try to run it on the command line: openvpn config.ovpn
Logged
Tripple_Delta
Jr. Member
Posts: 91
Karma: 3
Re: OpenVPN
«
Reply #4 on:
November 22, 2016, 08:53:55 pm »
Almost there. Works with iPhone and iPad. This is the error on my linux laptop:
Tue Nov 22 20:40:30 2016 ERROR: Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1)
Tue Nov 22 20:40:30 2016 Exiting due to fatal error
Any ideas?
Logged
Tripple_Delta
Jr. Member
Posts: 91
Karma: 3
Re: OpenVPN
«
Reply #5 on:
November 22, 2016, 09:42:44 pm »
Fixed.
I needed sudo
This method is new to me. Maybe someone can point me in the right direction what's next.
The commond line seems to hang but it looks like that is the point where I have a working VPN connection. Is there a way to save this setup or do I always have to do it like this?
Logged
fabian
Hero Member
Posts: 2769
Karma: 200
OPNsense Contributor (Language, VPN, Proxy, etc.)
Re: OpenVPN
«
Reply #6 on:
November 23, 2016, 04:10:39 pm »
You can start the connection via systemd or NetworkManager on Linux. NetworkManager offers you the possibility to import your configuration.
Logged
Tripple_Delta
Jr. Member
Posts: 91
Karma: 3
Re: OpenVPN
«
Reply #7 on:
November 23, 2016, 04:42:56 pm »
That's where things go wrong. I'm unable to import. I get an error.
Logged
fabian
Hero Member
Posts: 2769
Karma: 200
OPNsense Contributor (Language, VPN, Proxy, etc.)
Re: OpenVPN
«
Reply #8 on:
November 23, 2016, 06:19:30 pm »
On my computer I can import *.ovpn files. I use files in pem format for the key and the certificates. Maybe it is because of your p12 file.
Logged
Tripple_Delta
Jr. Member
Posts: 91
Karma: 3
Re: OpenVPN
«
Reply #9 on:
November 23, 2016, 09:43:32 pm »
Could be, but I don't see an option what to export in the archive file.
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
General Discussion
»
OpenVPN