<br><br><div class="gmail_quote">2011/3/20 Giuliano Cortinovis <span dir="ltr"><<a href="mailto:edicola.giuliano@gmail.com">edicola.giuliano@gmail.com</a>></span><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<br><br>scusate ancora a tutti ma non ne vengo più fuori.allora riepilogo come ho provato a creare un server vpn con openvpn.<br><br>link dove ho seguito la guida:<br><a href="http://returncode.wordpress.com/2007/10/24/openvpn-1-scenario-installazione-e-creazione-delle-chiavi/" target="_blank">http://returncode.wordpress.com/2007/10/24/openvpn-1-scenario-installazione-e-creazione-delle-chiavi/</a><br>
<br>file conf server dopo aver creato le varie chiavi e certificati: nome file :server.ovpn<br> <br>port 1194
<br> # TCP or UDP server?
<br>proto tcp
<br>dev tun
<br>dev-node OpenVPN
<br>ca ca.crt
<br>cert server.crt
<br>key server.key # This file should be kept secret
<br>dh dh1024.pem
<br>server 10.8.0.0 255.255.255.0
<br>ifconfig-pool-persist ipp.txt
<br>keepalive 10 120
<br>comp-lzo
<br>persist-key
<br>persist-tun
<br>status openvpn-status.log
<br>verb 3
<br><br><br>file conf client.ovpn (nella cartella /etc/openvpn/ ci sono tutti i cert. e le chiavi):<br><br>client<br>dev tun<br>dev-node OpenVPN<br>proto tcp<br>remote 192.168.1.230 1194<br>resolv-retry infinite<br>nobind<br>
persist-key<br>persist-tun<br>ca ca.crt<br>cert client.crt<br>key client.key<br>ns-cert-type server<br>comp-lzo<br>verb 3<br>mute 20<br><br>quando mi collego da ubuntu tramite gui gopenvpn ottengo questo log:<br><br>Sun Mar 20 10:16:09 2011: MANAGEMENT: CMD 'state on'
<br>Sun Mar 20 10:16:09 2011: MANAGEMENT: CMD 'auth-retry interact'
<br>Sun Mar 20 10:16:09 2011: MANAGEMENT: CMD 'hold release'
<br>Sun Mar 20 10:16:09 2011: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
<br>Sun Mar 20 10:16:09 2011: WARNING: file 'client.key' is group or others accessible
<br>Sun Mar 20 10:16:09 2011: /usr/bin/openssl-vulnkey -q -b 1024 -m <modulus omitted>
<br>Sun Mar 20 10:16:10 2011: LZO compression initialized
<br>Sun Mar 20 10:16:10 2011: Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
<br>Sun Mar 20 10:16:10 2011: Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
<br>Sun Mar 20 10:16:10 2011: Local Options hash (VER=V4): '69109d17'
<br>Sun Mar 20 10:16:10 2011: Expected Remote Options hash (VER=V4): 'c0103fa8'
<br>Sun Mar 20 10:16:10 2011: Attempting to establish TCP connection with [AF_INET]<a href="http://192.168.1.230:1194" target="_blank">192.168.1.230:1194</a> [nonblock]
<br>Sun Mar 20 10:16:10 2011: MANAGEMENT: >STATE:1300612570,TCP_CONNECT,,,
<br>Sun Mar 20 10:16:11 2011: TCP connection established with [AF_INET]<a href="http://192.168.1.230:1194" target="_blank">192.168.1.230:1194</a>
<br>Sun Mar 20 10:16:11 2011: Socket Buffers: R=[87380->131072] S=[16384->131072]
<br>Sun Mar 20 10:16:11 2011: TCPv4_CLIENT link local: [undef]
<br>Sun Mar 20 10:16:11 2011: TCPv4_CLIENT link remote: [AF_INET]<a href="http://192.168.1.230:1194" target="_blank">192.168.1.230:1194</a>
<br>Sun Mar 20 10:16:11 2011: MANAGEMENT: >STATE:1300612571,WAIT,,,
<br>Sun Mar 20 10:16:11 2011: MANAGEMENT: >STATE:1300612571,AUTH,,,
<br>Sun Mar 20 10:16:11 2011: TLS: Initial packet from [AF_INET]<a href="http://192.168.1.230:1194" target="_blank">192.168.1.230:1194</a>, sid=b72d064f f67ef50e
<br>Sun Mar 20 10:16:11 2011: VERIFY OK: depth=1, /C=IT/ST=IT/L=Bergamo/O=EdicolaCortinovis/CN=OpenVPN-CA/emailAddress=<a href="mailto:edicolacortinovis@email.it" target="_blank">edicolacortinovis@email.it</a>
<br>Sun Mar 20 10:16:11 2011: VERIFY OK: nsCertType=SERVER
<br>Sun Mar 20 10:16:11 2011: VERIFY OK: depth=0, /C=IT/ST=IT/O=EdicolaCortinovis/CN=OpenVPN-CA/emailAddress=<a href="mailto:edicolacortinovis@email.it" target="_blank">edicolacortinovis@email.it</a>
<br>Sun Mar 20 10:16:11 2011: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
<br>Sun Mar 20 10:16:11 2011: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
<br>Sun Mar 20 10:16:11 2011: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
<br>Sun Mar 20 10:16:11 2011: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
<br>Sun Mar 20 10:16:11 2011: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
<br>Sun Mar 20 10:16:11 2011: [OpenVPN-CA] Peer Connection Initiated with [AF_INET]<a href="http://192.168.1.230:1194" target="_blank">192.168.1.230:1194</a>
<br>Sun Mar 20 10:16:12 2011: MANAGEMENT: >STATE:1300612572,GET_CONFIG,,,
<br>Sun Mar 20 10:16:14 2011: SENT CONTROL [OpenVPN-CA]: 'PUSH_REQUEST' (status=1)
<br>Sun Mar 20 10:16:14 2011: PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.1,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
<br>Sun Mar 20 10:16:14 2011: OPTIONS IMPORT: timers and/or timeouts modified
<br>Sun Mar 20 10:16:14 2011: OPTIONS IMPORT: --ifconfig/up options modified
<br>Sun Mar 20 10:16:14 2011: OPTIONS IMPORT: route options modified
<br>Sun Mar 20 10:16:14 2011: ROUTE default_gateway=192.168.1.1
<br>Sun Mar 20 10:16:14 2011: Note: Cannot open TUN/TAP dev OpenVPN: No such file or directory (errno=2)
<br>Sun Mar 20 10:16:14 2011: Note: Attempting fallback to kernel 2.2 TUN/TAP interface
<br>Sun Mar 20 10:16:14 2011: Cannot open TUN/TAP dev OpenVPN: No such file or directory (errno=2)
<br><br>secondo me sbaglio qualche indirizzo ip o a settare sul server ip scheda OpenVPN.<br>le ho provate tutte anche a disattivare firewall router e firewill win.<br><br>spero di non avervi rotto le scatole ma ho proprio bisogno del vostro aiuto<br>
grazie ancora a tutti<br><br>
</blockquote></div><br><div style="visibility: hidden; left: -5000px; position: absolute; z-index: 9999; padding: 0px; margin-left: 0px; margin-top: 0px; overflow: hidden; word-wrap: break-word; color: black; font-size: 10px; text-align: left; line-height: 130%;" id="avg_ls_inline_popup">
</div>