From owner-freebsd-questions@FreeBSD.ORG Sat Jul 25 14:28:44 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 315A5106566C for ; Sat, 25 Jul 2009 14:28:44 +0000 (UTC) (envelope-from martinrame@yahoo.com) Received: from web35603.mail.mud.yahoo.com (web35603.mail.mud.yahoo.com [66.163.179.142]) by mx1.freebsd.org (Postfix) with SMTP id E517D8FC26 for ; Sat, 25 Jul 2009 14:28:43 +0000 (UTC) (envelope-from martinrame@yahoo.com) Received: (qmail 65987 invoked by uid 60001); 25 Jul 2009 14:28:43 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1248532123; bh=NIEstU/gwbZm6iiPD2A2os7Bt9XhEIANO/VsX8CzcsQ=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=PnUYep6eIpVRfarQaHNalz2sEbLKr/nd8C1fd0deVDtX0zjd08hEjmNeriZ+JDoADHwYXDW5avC9Az4S7QbaKJd1cnxcvk5DUGcNgQbvj2w6Wk2K58tzUr6yN+RSNf7fL6oU2r7gp/pGZ7EiJSzYDCcWuSok8slibmanzgWBdDM= DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=jJj2/vApKWq5jPnxO831aFlaV/PB6bsTZAXHwkMFz5r9cVocU9M90FfpB3Um/YO+A0dxhdgxzTv68FPANfhXP0rX1sDQJWqzDMPF88o0JG4HJSF9U0QKKU7Y8r7/ZhGBUCb53a2N6S8+XuPwMX795uSqLHEKjdRlYaI2QcPaE+0=; Message-ID: <288826.64593.qm@web35603.mail.mud.yahoo.com> X-YMail-OSG: XxFzF28VM1mPnzPbZusNY5naQv19iNKa.e9gtk_PVzfKsVfesW_QaP6LrWINbP1G0tlxc1Q13VCYSZgWBn8kL1fU9CIRzSF_SESesgwjoX1Sa6AlXFFPUMWzq_klD4_CabvpRjzpOaLvoZDfNHFufLxf9oNRH3T391iGgybtrSVH2f1EY0L5blzkW26_pBxxV7w5z7QDr5rMI6biMkLhYjbpsDrMptneG0t.tFOua0JQYJSLmY5I5e65eum8w8sLD7LBvuuyodwcjrsFA7UcFwFLzOmYEXBIHjCfuvcTcgI3QtLf5lpriZOaaeD9N._dZQ4bb9CSMAq79reyy_22CG1R1Xxc7LS9pkMeYw1g6Ds- Received: from [201.231.61.15] by web35603.mail.mud.yahoo.com via HTTP; Sat, 25 Jul 2009 07:28:43 PDT X-Mailer: YahooMailClassic/6.0.19 YahooMailWebService/0.7.289.15 Date: Sat, 25 Jul 2009 07:28:43 -0700 (PDT) From: =?iso-8859-1?Q?Leonardo_M=2E_Ram=E9?= To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Subject: OpenVPN Client X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Jul 2009 14:28:44 -0000 Hi, I'm trying to connect to an OpenVPN server in my office. To do this, I = installed "OpenVPN 2.0.6 i386-portbld-freebsd7.2 [SSL] [LZO]" from ports, a= nd looking at different tutorials I found it needs a config file in /usr/lo= cal/etc/openvpn/openvpn.conf. The problem here, is that our server provides= an "client.ovpn" file containing all the connection params needed by a cli= ent, in fact, we connect windows machines just by installing "OpenVPN_Insta= ller.exe", it configures a TAP device and a client that reads the client.ov= pn file.=0A=0ANow, in my FreeBSD 7.2 i386 machine, I did this:=0A=0ACreated= the /usr/local/etc/openvpn/openvpn.conf (the port doesn't created it autom= atically) with this content:=0A=0Aremote 200.80.219.194.static.techtelnet.n= et=0Aclient=0Aproto tcp =0Aport 443=0Adev tun =0Ans-cert-type server=0Aauth= -user-pass=0Aauth-retry interact=0Acomp-lzo=0Auser nobody=0Agroup nobody=0A= verb 3=0Aca /usr/local/etc/openvpn/keys/ca.key=0Acert /usr/local/etc/openvp= n/keys/cert.key=0Akey /usr/local/etc/openvpn/keys/key.key=0A=0AThis content= s are extracted from client.ovpn, and "ca", "cert" and "key" files were ext= racted from the same file.=0A=0AI kldload tun, but when I do ifconfig, it d= oesn't shows nothing related to tun or tap.=0A=0AAlso, when I do "openvpn /= usr/local/etc/openvpn/openvpn.conf" the results are this:=0A=0ASat Jul 25 1= 1:24:09 2009 OpenVPN 2.0.6 i386-portbld-freebsd7.2 [SSL] [LZO] built on Jul= 24 2009=0AEnter Auth Username:nico=0AEnter Auth Password:****=0ASat Jul 25= 11:24:13 2009 WARNING: you are using user/group/chroot without persist-key= /persist-tun -- this may cause restarts to fail=0ASat Jul 25 11:24:13 2009 = WARNING: file '/usr/local/etc/openvpn/keys/key.key' is group or others acce= ssible=0ASat Jul 25 11:24:13 2009 LZO compression initialized=0ASat Jul 25 = 11:24:13 2009 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0= ]=0ASat Jul 25 11:24:13 2009 Data Channel MTU parms [ L:1544 D:1450 EF:44 = EB:135 ET:0 EL:0 AF:3/1 ]=0ASat Jul 25 11:24:13 2009 Local Options hash (VE= R=3DV4): '69109d17'=0ASat Jul 25 11:24:13 2009 Expected Remote Options hash= (VER=3DV4): 'c0103fa8'=0ASat Jul 25 11:24:13 2009 NOTE: UID/GID downgrade = will be delayed because of --client, --pull, or --up-delay=0ASat Jul 25 11:= 24:13 2009 Attempting to establish TCP connection with 200.80.219.194:443= =0ASat Jul 25 11:24:13 2009 TCP connection established with 200.80.219.194:= 443=0ASat Jul 25 11:24:13 2009 TCPv4_CLIENT link local: [undef]=0ASat Jul 2= 5 11:24:13 2009 TCPv4_CLIENT link remote: 200.80.219.194:443=0ASat Jul 25 1= 1:24:13 2009 Connection reset, restarting [0]=0ASat Jul 25 11:24:13 2009 TC= P/UDP: Closing socket=0ASat Jul 25 11:24:13 2009 SIGUSR1[soft,connection-re= set] received, process restarting=0ASat Jul 25 11:24:13 2009 Restart pause,= 5 second(s)=0A=0AIn my /etc/rc.conf I have openvpn_if=3D"tun", I don't loa= d the tun nor tap interface at boot, I just want to load it with kldload.= =0A=0Auname -a:=0AFreeBSD inspiron.local 7.2-RELEASE FreeBSD 7.2-RELEASE #0= : Fri May 1 08:49:13 UTC 2009 root@walker.cse.buffalo.edu:/usr/obj/usr= /src/sys/GENERIC i386=0A=0Aifconfig:=0Andis0: flags=3D8843 metric 0 mtu 1500=0A ether 00:23:4d:64:d6:7= a=0A inet 192.168.0.100 netmask 0xffffff00 broadcast 192.168.0.255= =0A media: IEEE 802.11 Wireless Ethernet autoselect=0A status= : associated=0A ssid "" channel 1 (2412 Mhz 11b)=0A authmode = OPEN privacy OFF bmiss 7 scanvalid 60 roaming MANUAL=0A bintval 0=0A= fwe0: flags=3D8802 metric 0 mtu 1500=0A = options=3D8=0A ether 32:4f:c0:e1:55:e1=0A ch 1 dma= -1=0Afwip0: flags=3D8802 metric 0 mtu 1500=0A= lladdr 33.4f.c0.0.26.e1.55.e1.a.2.ff.fe.0.0.0.0=0Alo0: flags=3D8049= metric 0 mtu 16384=0A inet6 fe80::1%= lo0 prefixlen 64 scopeid 0x4 =0A inet6 ::1 prefixlen 128 =0A = inet 127.0.0.1 netmask 0xff000000 =0A=0AThanks in advance,=0ALeonardo M. Ra= m=E9=0A=0A=0A