Ik ben bezig met een vpn verbinding via openpn via TLS. Op de office pc heb ik alle certificaten gemaakt. En 3 daarvan heb ik verzonden naar home net zoals in de howto die bij openvpn hoort http://openvpn.sourceforge.net/howto.html. Als home nu probeert inte loggen krijgt hij een langer error, op de office pc zie je wel dat hij probeert in te loggen dus verbinding maken ze.
De error + overzicht conf home
------------------------------------------------------------------------------------
0[0]: Current Parameter Settings:
1[0]: persist_config = DISABLED
2[0]: persist_mode = 1
3[0]: show_ciphers = DISABLED
4[0]: show_digests = DISABLED
5[0]: genkey = DISABLED
6[0]: askpass = DISABLED
7[0]: show_tls_ciphers = DISABLED
8[0]: local = '[UNDEF]'
9[0]: remote = '213.10.156.123'
10[0]: local_port = 5000
11[0]: remote_port = 5000
12[0]: remote_float = DISABLED
13[0]: ipchange = '[UNDEF]'
14[0]: bind_local = DISABLED
15[0]: dev = 'tun'
16[0]: dev_type = '[UNDEF]'
17[0]: dev_node = '[UNDEF]'
18[0]: ifconfig_local = '10.1.0.1'
19[0]: ifconfig_remote = '10.1.0.2'
20[0]: shaper = 0
21[0]: tun_mtu = 1300
22[0]: tun_mtu_defined = DISABLED
23[0]: udp_mtu = 1300
24[0]: udp_mtu_defined = ENABLED
25[0]: mlock = DISABLED
26[0]: inactivity_timeout = 0
27[0]: ping_send_timeout = 15
28[0]: ping_rec_timeout = 0
29[0]: ping_rec_timeout_action = 0
30[0]: ping_timer_remote = DISABLED
31[0]: persist_tun = DISABLED
32[0]: persist_local_ip = DISABLED
33[0]: persist_remote_ip = DISABLED
34[0]: persist_key = DISABLED
35[0]: resolve_retry_seconds = 0
36[0]: username = '[UNDEF]'
37[0]: groupname = '[UNDEF]'
38[0]: chroot_dir = '[UNDEF]'
39[0]: cd_dir = '[UNDEF]'
40[0]: writepid = '[UNDEF]'
41[0]: up_script = '/etc/openvpn/home.up'
42[0]: down_script = '[UNDEF]'
43[0]: daemon = DISABLED
44[0]: nice = 0
45[0]: verbosity = 5
46[0]: mute = 0
47[0]: gremlin = DISABLED
48[0]: comp_lzo = ENABLED
49[0]: comp_lzo_adaptive = ENABLED
50[0]: shared_secret_file = '[UNDEF]'
51[0]: ciphername_defined = ENABLED
52[0]: ciphername = 'BF-CBC'
53[0]: authname_defined = ENABLED
54[0]: authname = 'SHA1'
55[0]: keysize = 0
56[0]: packet_id = ENABLED
57[0]: iv = ENABLED
58[0]: test_crypto = DISABLED
59[0]: tls_server = DISABLED
60[0]: tls_client = ENABLED
61[0]: ca_file = '/var/ssl/my-ca.crt'
62[0]: dh_file = '[UNDEF]'
63[0]: cert_file = '/var/ssl/home.crt'
64[0]: priv_key_file = '/var/ssl/home.key'
65[0]: cipher_list = '[UNDEF]'
66[0]: tls_verify = '[UNDEF]'
67[0]: tls_timeout = 5
68[0]: renegotiate_bytes = 0
69[0]: renegotiate_packets = 0
70[0]: renegotiate_seconds = 3600
71[0]: handshake_window = 60
72[0]: transition_window = 3600
73[0]: single_session = DISABLED
74[0]: disable_occ = DISABLED
75[0]: tls_auth_file = '[UNDEF]'
76[0]: OpenVPN 1.3.0 i386-pc-linux-gnu built on Sep 21 2002
77[0]: PTHREAD support initialized
78[0]: UDP link local: [undef]
79[0]: UDP link remote: 213.10.156.123:5000
80[0]: WARNING: file /var/ssl/home.key is group or others accessible
81[0]: LZO compression initialized
82[0]: Data Channel MTU parms: mtu=1258 extra_frame=42 extra_buffer=61 extra_tun=0
83[0]: Control Channel MTU parms: mtu=1262 extra_frame=38 extra_buffer=38 extra_tun=0
84[0]: tun/tap device tun0 opened
85[0]: ifconfig tun0 10.1.0.1 pointopoint 10.1.0.2 mtu 1258
86[0]: /etc/openvpn/home.up tun0 1258 1300 10.1.0.1 10.1.0.2
87[0]: tls_pre_decrypt: first response to initial packet sid=e538d0f0 ffeb7f79
88[1]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
89[1]: Data Channel Encrypt: Using 160 bit message digest 'SHA1' for HMAC authentication
90[1]: VERIFY ERROR: depth=1, error=certificate is not yet valid: /C=NE/ST=Utrecht/L=Woerden/CN=Server/Email=kick_wel@planet.nl
91[1]: TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
92[1]: TLS Error: TLS object -> incoming plaintext read error
93[1]: TLS Error: TLS handshake failed
94[0]: tls_pre_decrypt: first response to initial packet sid=af7f2d23 75eefb98
95[1]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
96[1]: Data Channel Encrypt: Using 160 bit message digest 'SHA1' for HMAC authentication
97[1]: VERIFY ERROR: depth=1, error=certificate is not yet valid: /C=NE/ST=Utrecht/L=Woerden/CN=Server/Email=kick_wel@planet.nl
98[1]: TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
99[1]: TLS Error: TLS object -> incoming plaintext read error
100[1]: TLS Error: TLS handshake failed
101[0]: TLS Error: Unroutable control packet received from 213.10.156.123:5000 (si=3 op=P_ACK_V1)
102[0]: TLS Error: Unroutable control packet received from 213.10.156.123:5000 (si=3 op=P_ACK_V1)
103[0]: TLS Error: Unroutable control packet received from 213.10.156.123:5000 (si=3 op=P_ACK_V1)
104[0]: TLS Error: Unroutable control packet received from 213.10.156.123:5000 (si=3 op=P_ACK_V1)
105[0]: SIGINT received, exiting
106[0]: Closing tun/tap device
-----------------------------------------------------------------------------------------------------------
de error + conf office
---------------------------------------------------------------------------------------------------------
0[0]: Current Parameter Settings:
1[0]: persist_config = DISABLED
2[0]: persist_mode = 1
3[0]: show_ciphers = DISABLED
4[0]: show_digests = DISABLED
5[0]: genkey = DISABLED
6[0]: askpass = DISABLED
7[0]: show_tls_ciphers = DISABLED
8[0]: local = '[UNDEF]'
9[0]: remote = '[UNDEF]'
10[0]: local_port = 5000
11[0]: remote_port = 5000
12[0]: remote_float = DISABLED
13[0]: ipchange = '[UNDEF]'
14[0]: bind_local = ENABLED
15[0]: dev = 'tun'
16[0]: dev_type = '[UNDEF]'
17[0]: dev_node = '[UNDEF]'
18[0]: ifconfig_local = '10.1.0.1'
19[0]: ifconfig_remote = '10.1.0.2'
20[0]: shaper = 0
21[0]: tun_mtu = 1300
22[0]: tun_mtu_defined = DISABLED
23[0]: udp_mtu = 1300
24[0]: udp_mtu_defined = ENABLED
25[0]: mlock = DISABLED
26[0]: inactivity_timeout = 0
27[0]: ping_send_timeout = 15
28[0]: ping_rec_timeout = 0
29[0]: ping_rec_timeout_action = 0
30[0]: ping_timer_remote = DISABLED
31[0]: persist_tun = DISABLED
32[0]: persist_local_ip = DISABLED
33[0]: persist_remote_ip = DISABLED
34[0]: persist_key = DISABLED
35[0]: resolve_retry_seconds = 0
36[0]: username = '[UNDEF]'
37[0]: groupname = '[UNDEF]'
38[0]: chroot_dir = '[UNDEF]'
39[0]: cd_dir = '[UNDEF]'
40[0]: writepid = '[UNDEF]'
41[0]: up_script = '/etc/openvpn/office.up'
42[0]: down_script = '[UNDEF]'
43[0]: daemon = DISABLED
44[0]: nice = 0
45[0]: verbosity = 5
46[0]: mute = 0
47[0]: gremlin = DISABLED
48[0]: comp_lzo = ENABLED
49[0]: comp_lzo_adaptive = ENABLED
50[0]: shared_secret_file = '[UNDEF]'
51[0]: ciphername_defined = ENABLED
52[0]: ciphername = 'BF-CBC'
53[0]: authname_defined = ENABLED
54[0]: authname = 'SHA1'
55[0]: keysize = 0
56[0]: packet_id = ENABLED
57[0]: iv = ENABLED
58[0]: test_crypto = DISABLED
59[0]: tls_server = ENABLED
60[0]: tls_client = DISABLED
61[0]: ca_file = '/etc/openvpn/ssl/my-ca.crt'
62[0]: dh_file = '/etc/openvpn/ssl/dh1024.pem'
63[0]: cert_file = '/etc/openvpn/ssl/office.crt'
64[0]: priv_key_file = '/etc/openvpn/ssl/office.key'
65[0]: cipher_list = '[UNDEF]'
66[0]: tls_verify = '[UNDEF]'
67[0]: tls_timeout = 5
68[0]: renegotiate_bytes = 0
69[0]: renegotiate_packets = 0
70[0]: renegotiate_seconds = 3600
71[0]: handshake_window = 60
72[0]: transition_window = 3600
73[0]: single_session = DISABLED
74[0]: disable_occ = DISABLED
75[0]: tls_auth_file = '[UNDEF]'
76[0]: OpenVPN 1.3.0 i386-pc-linux-gnu built on Sep 21 2002
77[0]: PTHREAD support initialized
78[0]: UDP link local (bound): [undef]:5000
79[0]: UDP link remote: [undef]
80[0]: Diffie-Hellman initialized with 1024 bit key
81[0]: WARNING: file /etc/openvpn/ssl/office.key is group or others accessible
82[0]: LZO compression initialized
83[0]: Data Channel MTU parms: mtu=1258 extra_frame=42 extra_buffer=61 extra_tun=0
84[0]: Control Channel MTU parms: mtu=1262 extra_frame=38 extra_buffer=38 extra_tun=0
85[0]: tun/tap device tun0 opened
86[0]: ifconfig tun0 10.1.0.1 pointopoint 10.1.0.2 mtu 1258
87[0]: /etc/openvpn/office.up tun0 1258 1300 10.1.0.1 10.1.0.2
88[0]: tls_pre_decrypt: first response to initial packet sid=109ffcba 7cbe8823
89[0]: tls_pre_decrypt: new session incoming connection from 62.45.127.91:5000
90[0]: tls_pre_decrypt: new session incoming connection from 62.45.127.91:5000
91[1]: TLS Error: TLS key negotiation failed to occur within 60 seconds
92[1]: TLS Error: TLS handshake failed
93[1]: TLS Error: TLS key negotiation failed to occur within 60 seconds
94[1]: TLS Error: TLS handshake failed
---------------------------------------------------------------------------------------------------------
Zelf weet ik het eigenlijk niet meer. Heb de certificaten al een paar keer vervangen ook op de home pc. Misschien dat er nog wat met die certificaten op het home pc moet gebeuren?
Weet iemand misschein wat ik fout gedaan heb ??
De error + overzicht conf home
------------------------------------------------------------------------------------
0[0]: Current Parameter Settings:
1[0]: persist_config = DISABLED
2[0]: persist_mode = 1
3[0]: show_ciphers = DISABLED
4[0]: show_digests = DISABLED
5[0]: genkey = DISABLED
6[0]: askpass = DISABLED
7[0]: show_tls_ciphers = DISABLED
8[0]: local = '[UNDEF]'
9[0]: remote = '213.10.156.123'
10[0]: local_port = 5000
11[0]: remote_port = 5000
12[0]: remote_float = DISABLED
13[0]: ipchange = '[UNDEF]'
14[0]: bind_local = DISABLED
15[0]: dev = 'tun'
16[0]: dev_type = '[UNDEF]'
17[0]: dev_node = '[UNDEF]'
18[0]: ifconfig_local = '10.1.0.1'
19[0]: ifconfig_remote = '10.1.0.2'
20[0]: shaper = 0
21[0]: tun_mtu = 1300
22[0]: tun_mtu_defined = DISABLED
23[0]: udp_mtu = 1300
24[0]: udp_mtu_defined = ENABLED
25[0]: mlock = DISABLED
26[0]: inactivity_timeout = 0
27[0]: ping_send_timeout = 15
28[0]: ping_rec_timeout = 0
29[0]: ping_rec_timeout_action = 0
30[0]: ping_timer_remote = DISABLED
31[0]: persist_tun = DISABLED
32[0]: persist_local_ip = DISABLED
33[0]: persist_remote_ip = DISABLED
34[0]: persist_key = DISABLED
35[0]: resolve_retry_seconds = 0
36[0]: username = '[UNDEF]'
37[0]: groupname = '[UNDEF]'
38[0]: chroot_dir = '[UNDEF]'
39[0]: cd_dir = '[UNDEF]'
40[0]: writepid = '[UNDEF]'
41[0]: up_script = '/etc/openvpn/home.up'
42[0]: down_script = '[UNDEF]'
43[0]: daemon = DISABLED
44[0]: nice = 0
45[0]: verbosity = 5
46[0]: mute = 0
47[0]: gremlin = DISABLED
48[0]: comp_lzo = ENABLED
49[0]: comp_lzo_adaptive = ENABLED
50[0]: shared_secret_file = '[UNDEF]'
51[0]: ciphername_defined = ENABLED
52[0]: ciphername = 'BF-CBC'
53[0]: authname_defined = ENABLED
54[0]: authname = 'SHA1'
55[0]: keysize = 0
56[0]: packet_id = ENABLED
57[0]: iv = ENABLED
58[0]: test_crypto = DISABLED
59[0]: tls_server = DISABLED
60[0]: tls_client = ENABLED
61[0]: ca_file = '/var/ssl/my-ca.crt'
62[0]: dh_file = '[UNDEF]'
63[0]: cert_file = '/var/ssl/home.crt'
64[0]: priv_key_file = '/var/ssl/home.key'
65[0]: cipher_list = '[UNDEF]'
66[0]: tls_verify = '[UNDEF]'
67[0]: tls_timeout = 5
68[0]: renegotiate_bytes = 0
69[0]: renegotiate_packets = 0
70[0]: renegotiate_seconds = 3600
71[0]: handshake_window = 60
72[0]: transition_window = 3600
73[0]: single_session = DISABLED
74[0]: disable_occ = DISABLED
75[0]: tls_auth_file = '[UNDEF]'
76[0]: OpenVPN 1.3.0 i386-pc-linux-gnu built on Sep 21 2002
77[0]: PTHREAD support initialized
78[0]: UDP link local: [undef]
79[0]: UDP link remote: 213.10.156.123:5000
80[0]: WARNING: file /var/ssl/home.key is group or others accessible
81[0]: LZO compression initialized
82[0]: Data Channel MTU parms: mtu=1258 extra_frame=42 extra_buffer=61 extra_tun=0
83[0]: Control Channel MTU parms: mtu=1262 extra_frame=38 extra_buffer=38 extra_tun=0
84[0]: tun/tap device tun0 opened
85[0]: ifconfig tun0 10.1.0.1 pointopoint 10.1.0.2 mtu 1258
86[0]: /etc/openvpn/home.up tun0 1258 1300 10.1.0.1 10.1.0.2
87[0]: tls_pre_decrypt: first response to initial packet sid=e538d0f0 ffeb7f79
88[1]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
89[1]: Data Channel Encrypt: Using 160 bit message digest 'SHA1' for HMAC authentication
90[1]: VERIFY ERROR: depth=1, error=certificate is not yet valid: /C=NE/ST=Utrecht/L=Woerden/CN=Server/Email=kick_wel@planet.nl
91[1]: TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
92[1]: TLS Error: TLS object -> incoming plaintext read error
93[1]: TLS Error: TLS handshake failed
94[0]: tls_pre_decrypt: first response to initial packet sid=af7f2d23 75eefb98
95[1]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
96[1]: Data Channel Encrypt: Using 160 bit message digest 'SHA1' for HMAC authentication
97[1]: VERIFY ERROR: depth=1, error=certificate is not yet valid: /C=NE/ST=Utrecht/L=Woerden/CN=Server/Email=kick_wel@planet.nl
98[1]: TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
99[1]: TLS Error: TLS object -> incoming plaintext read error
100[1]: TLS Error: TLS handshake failed
101[0]: TLS Error: Unroutable control packet received from 213.10.156.123:5000 (si=3 op=P_ACK_V1)
102[0]: TLS Error: Unroutable control packet received from 213.10.156.123:5000 (si=3 op=P_ACK_V1)
103[0]: TLS Error: Unroutable control packet received from 213.10.156.123:5000 (si=3 op=P_ACK_V1)
104[0]: TLS Error: Unroutable control packet received from 213.10.156.123:5000 (si=3 op=P_ACK_V1)
105[0]: SIGINT received, exiting
106[0]: Closing tun/tap device
-----------------------------------------------------------------------------------------------------------
de error + conf office
---------------------------------------------------------------------------------------------------------
0[0]: Current Parameter Settings:
1[0]: persist_config = DISABLED
2[0]: persist_mode = 1
3[0]: show_ciphers = DISABLED
4[0]: show_digests = DISABLED
5[0]: genkey = DISABLED
6[0]: askpass = DISABLED
7[0]: show_tls_ciphers = DISABLED
8[0]: local = '[UNDEF]'
9[0]: remote = '[UNDEF]'
10[0]: local_port = 5000
11[0]: remote_port = 5000
12[0]: remote_float = DISABLED
13[0]: ipchange = '[UNDEF]'
14[0]: bind_local = ENABLED
15[0]: dev = 'tun'
16[0]: dev_type = '[UNDEF]'
17[0]: dev_node = '[UNDEF]'
18[0]: ifconfig_local = '10.1.0.1'
19[0]: ifconfig_remote = '10.1.0.2'
20[0]: shaper = 0
21[0]: tun_mtu = 1300
22[0]: tun_mtu_defined = DISABLED
23[0]: udp_mtu = 1300
24[0]: udp_mtu_defined = ENABLED
25[0]: mlock = DISABLED
26[0]: inactivity_timeout = 0
27[0]: ping_send_timeout = 15
28[0]: ping_rec_timeout = 0
29[0]: ping_rec_timeout_action = 0
30[0]: ping_timer_remote = DISABLED
31[0]: persist_tun = DISABLED
32[0]: persist_local_ip = DISABLED
33[0]: persist_remote_ip = DISABLED
34[0]: persist_key = DISABLED
35[0]: resolve_retry_seconds = 0
36[0]: username = '[UNDEF]'
37[0]: groupname = '[UNDEF]'
38[0]: chroot_dir = '[UNDEF]'
39[0]: cd_dir = '[UNDEF]'
40[0]: writepid = '[UNDEF]'
41[0]: up_script = '/etc/openvpn/office.up'
42[0]: down_script = '[UNDEF]'
43[0]: daemon = DISABLED
44[0]: nice = 0
45[0]: verbosity = 5
46[0]: mute = 0
47[0]: gremlin = DISABLED
48[0]: comp_lzo = ENABLED
49[0]: comp_lzo_adaptive = ENABLED
50[0]: shared_secret_file = '[UNDEF]'
51[0]: ciphername_defined = ENABLED
52[0]: ciphername = 'BF-CBC'
53[0]: authname_defined = ENABLED
54[0]: authname = 'SHA1'
55[0]: keysize = 0
56[0]: packet_id = ENABLED
57[0]: iv = ENABLED
58[0]: test_crypto = DISABLED
59[0]: tls_server = ENABLED
60[0]: tls_client = DISABLED
61[0]: ca_file = '/etc/openvpn/ssl/my-ca.crt'
62[0]: dh_file = '/etc/openvpn/ssl/dh1024.pem'
63[0]: cert_file = '/etc/openvpn/ssl/office.crt'
64[0]: priv_key_file = '/etc/openvpn/ssl/office.key'
65[0]: cipher_list = '[UNDEF]'
66[0]: tls_verify = '[UNDEF]'
67[0]: tls_timeout = 5
68[0]: renegotiate_bytes = 0
69[0]: renegotiate_packets = 0
70[0]: renegotiate_seconds = 3600
71[0]: handshake_window = 60
72[0]: transition_window = 3600
73[0]: single_session = DISABLED
74[0]: disable_occ = DISABLED
75[0]: tls_auth_file = '[UNDEF]'
76[0]: OpenVPN 1.3.0 i386-pc-linux-gnu built on Sep 21 2002
77[0]: PTHREAD support initialized
78[0]: UDP link local (bound): [undef]:5000
79[0]: UDP link remote: [undef]
80[0]: Diffie-Hellman initialized with 1024 bit key
81[0]: WARNING: file /etc/openvpn/ssl/office.key is group or others accessible
82[0]: LZO compression initialized
83[0]: Data Channel MTU parms: mtu=1258 extra_frame=42 extra_buffer=61 extra_tun=0
84[0]: Control Channel MTU parms: mtu=1262 extra_frame=38 extra_buffer=38 extra_tun=0
85[0]: tun/tap device tun0 opened
86[0]: ifconfig tun0 10.1.0.1 pointopoint 10.1.0.2 mtu 1258
87[0]: /etc/openvpn/office.up tun0 1258 1300 10.1.0.1 10.1.0.2
88[0]: tls_pre_decrypt: first response to initial packet sid=109ffcba 7cbe8823
89[0]: tls_pre_decrypt: new session incoming connection from 62.45.127.91:5000
90[0]: tls_pre_decrypt: new session incoming connection from 62.45.127.91:5000
91[1]: TLS Error: TLS key negotiation failed to occur within 60 seconds
92[1]: TLS Error: TLS handshake failed
93[1]: TLS Error: TLS key negotiation failed to occur within 60 seconds
94[1]: TLS Error: TLS handshake failed
---------------------------------------------------------------------------------------------------------
Zelf weet ik het eigenlijk niet meer. Heb de certificaten al een paar keer vervangen ook op de home pc. Misschien dat er nog wat met die certificaten op het home pc moet gebeuren?
Weet iemand misschein wat ik fout gedaan heb ??
[ Voor 4% gewijzigd door Verwijderd op 12-02-2003 19:29 ]
Ik heb hem helemaal gevolgd..