Tag Info

Hot answers tagged

3

You should use the same CA and make sure it's secured (as anyone compromising it would be able to issue certificates for it and perform a MITM attack). You might consider putting a machine offline and using it for this purpose only. As long as it's for internal use only, a self-signed cert will work fine. Remember that you'll have to install the CA root ...


1

The problem here is that although clients of A (let's call them X, Y, Z) can route to B via your VPN link, there is no route from B back to clients X, Y, Z. Without specifics it's tricky to provide an exact solution. Consider this example, though: Your clients are in subnet 192.168.1.0/24 Server A has its end of the OpenVPN link as 192.168.2.1 Server B ...


1

I understand the routing table is a "fall through" table Not really. The routing table is ordered from "most specific route" to "least specific route". Your default route is via br0, and is defined as the route of last resort because there is no netmask (i.e. genmask is 0.0.0.0). because the 1st entry is 0.0.0.0 all traffic will go through the tun1 ...


1

OpenVPN doesn't document the exact algorithm it uses to find free addresses in the pool because it's an implementation detail and it doesn't really matter as long as it's a free address. Nevertheless, you can see what algorithm it uses by looking at the function ifconfig_pool_find in pool.c: If in duplicate_cn mode, take the first free address. If the IP ...


1

By default, OpenVPN does not reconfigure the DNS on non-Windows. You could use a hook (sorry the explanations are in French) in order to do this: #!/bin/sh # Write foreign options to stdout: foreign_options() { local i while true; do local varname=foreign_option_$i local value="$(eval echo \$$varname)" if [ -z "$value" ]; then ...


1

This is a known bug with NetworkManager, and it's been open since October 2010: https://bugzilla.gnome.org/show_bug.cgi?id=633337 It does not seem likely that NetworkManager will be able to import .ovpn files any time soon. Given this, you have two alternatives: Use the following command instead: sudo openvpn --config client.ovpn. This works for me in ...



Only top voted, non community-wiki answers of a minimum length are eligible