Questions tagged [openvpn]

OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

OpenVPN is a free and open source software application that implements VPN techniques for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. It uses SSL/TLS security for encryption and is capable of traversing network address translators and firewalls.

It's architecture is build upon 4 principles:

  • Encryption
  • Authentication
  • Networking
  • Security

More info is to be found on the Open-Source site of VPN.
A very thorough tutorial can be found on Shorewall.

3274 questions
4
votes
1 answer

How is Netflix tracking that I'm behind a VPN?

Disclaimer: This is not a "I need VPN to surf Netflix". Surfing without VPN at this site allows Netflix. The question is instead the other way around: "There is a PC that needs to Internet through VPN only, but Netflix detects it is behind VPN.…
Marco
  • 1,709
  • 3
  • 17
  • 31
4
votes
3 answers

openvpn: crl has expired?

We have an OpenVPN in our aws setup which was set up by a client and now they are not able to connect to open vpn say "crl has expired" . We are trying to regenerate the crl but to do that we need to go to the easy-rsa folder and there I need to run…
Ganesh
  • 41
  • 1
  • 2
4
votes
1 answer

Where can I find details on selinux Booleans

I'm running an openvpn server and I want to use SELinux. When it's activated I see a few "denied" events in the logs. I've used audit2allow to create a '.te' file. My question is about these lines in the file. #============= openvpn_t…
D.Fitz
  • 162
  • 1
  • 8
4
votes
1 answer

OpenVPN Access Server - How Do You Route All Client Traffic Through The VPN?

I currently have an EC2 server with OpenVPN installed that I spun up using the official OpenVPN Access Server AMI. I went through the OpenVPN setup process with all default values selected and I've been able to connect to my instance using the…
Lloyd Banks
  • 141
  • 1
  • 3
4
votes
1 answer

OpenVPN revoke user - CRL verify issues

I have configured my OpenVPN and it is working properly so far. Lately I had to revoke one certificate and after using easy-rsa revoke-full, I saw that in index.txt that specific user has been revoked. I also noticed that crl.pem has new timestamp…
dovla110010101
  • 162
  • 1
  • 2
  • 10
4
votes
0 answers

Route QEMU VM traffic through hosts VPN

tl;dr Host connects via VPN to the internet and a VM on this host doesn't go through this VPN (but it should). I think the network config isn't quite correct. The host The host (arch Linux) connects to a VPN network using openvpn and a config file,…
theo_retiker
  • 41
  • 1
  • 2
4
votes
2 answers

OpenVpn: unable to accept multiple connection from same user

Situation I'm using OpenVpn Server Access appliance, not the free CE edition; I do not know if they're different in config or in behaviours. Current appliance version is: 2.1.9 Server version: 2.5.2 License status: 2 devices All of the following…
realtebo
  • 367
  • 1
  • 7
  • 18
4
votes
1 answer

OpenVPN client freezes on connection

I have a network of machines inside an OpenVPN network. With no problem, I can connect into that network from my local machine: openvpn --config ./myconfig.ovpn --auth-user-pass ./mycredentials The problem is that I am trying to connect another…
The Brewmaster
  • 161
  • 2
  • 7
4
votes
2 answers

OpenVPN client reconnecting due to --ping-restart even if traffic is flowing both ways

The situation: An OpenVPN (2.3.12) server with public IP 1.1.1.1 running in Amazon EC2, using the UDP protocol. A remote OpenVPN (2.3.10) client with public IP 2.2.2.2, somewhere on an ADSL connection and behind a wifi home router and…
Thomas
  • 811
  • 1
  • 9
  • 18
4
votes
2 answers

OpenVPN Client Authentication without Certificates

I've been trying to get my OVPN server work without client-side certificate verification. My server.conf contains the following: # Ports & protocols port 1194 proto udp dev tun # Server certs and keys ca /etc/openvpn/keys/ca.crt cert…
4
votes
2 answers

OpenVPN and systemd-resolved: DNS does not resolve VPN internal names

I have a VPN set up on some virtual machines using OpenVPN. One of the VMs is running dnsmasq to provide a basic DNS for inside the network. My client is running Ubuntu, which now more or less forces systemd-resolved. I am finding that although it…
siride
  • 569
  • 2
  • 8
  • 18
4
votes
1 answer

Tunnelblick Options error: Unrecognized option or missing parameter(s) in tls-crypt (2.3.17)

I have a new OpenVPN config which runs Ok on the server but the client fails to connect with the following error: Options error: Unrecognized option or missing parameter(s) in /Library/Application…
markhorrocks
  • 513
  • 3
  • 10
  • 26
4
votes
1 answer

Correct place to advertise OpenVPN routes to EC2 Instances?

Setup I have a OpenVPN server working well in AWS. Everyone on my team can use it to reach any of the servers in AWS. Need Now I have a new need. Now servers in AWS need to be able to reach one (but all would be fine) of the machines that connected…
Bruno Bronosky
  • 4,529
  • 3
  • 26
  • 34
4
votes
2 answers

Permit only N connection for a user/config in openvpn

I have openvpn on a server and a few client configs. How can I permit only a single connection for a user? Or if not necessarily single connection, but no more than N connections for user. I've not found anything regarding this matter in the…
Jodimoro
  • 147
  • 2
  • 9
4
votes
0 answers

Openvpn multi-factor authentication using active directory certificate store

Integrated Enterprise OpenVPN Configuration I've scoured the Internet high and low attempting to locate a definitive source of how to configure openvpn in a manner that is secure, and most importantly, is 100% integrated with Active Directory. I am…
W. Smith
  • 41
  • 1
  • 2