New answers tagged openvpn
push route "10.10.10.0 255.255.255.0 10.0.0.2 1" From the openvpn man page: --route network/IP [netmask] [gateway] [metric] This tells the server config to "push" to the client, the route command which sets a nwtworking route of the 10.10.10.0/24 subnet via the gateway 10.0.0.2 with a metric of 1. Metrics are used to give "preference" if multiple routes ...
This one is the fatal error: Cannot load CA certificate file /home/mak/Downloads/ca.key There are a couple reasons that it may not be able to load the key: Permissions are wrong. Check to make sure the file is readable File doesn't exist. Confirm the path & name is correct. File is in the wrong format, or is not a CA certificate. Try openssl x509 ...
Those are the IP addresses of the local and remote tunnel endpoints (in that order). They're used for routing (and of course the local one is a local IP address, just like on any other interface). You could use public IPs, but its a waste of IP addresses in most cases—you can use internal (RFC1918) addresses even if you're routing a public subnet over the ...
It's not even possible. Ethernet interfaces have a link layer (MAC address), tun interfaces don't. You can bridge Ethernet to tap interfaces. Apart from that: What is the purpose of a VPN? Usually it is to separate legitimate communication partners from the rest. What is the point if someone just needs to connect to the LAN in order to get privileged ...
You could simply synchronize the time using ntp right before your are starting the connection, e.g. by using a little script to connect to the VPN: #!/bin/sh ntpdate ntp.example.com openvpn --config myvpn.conf
That's actually the best error message I've seen. It tells you exactly what's wrong and how to fix it. I don't see any kind of problem if you really want to allow openvpn use port 1194. BTW, to make errors in english you can use LANG=C before the commands (not sure if you can with auth.log).
Top 50 recent answers are included