Alpha 20060602a

sq7ro · **Posted:** Wed Jul 05, 2006 10:26 pm

Hi,

lerra wrote:

Excuse me for this lame question, but where can I get openvpn for ppc? I have tryed to search the forum, and checked www.sw7ro.net but nothing. I found this forum from google and a user posted that its posseble to run openvpn on a qtek 9100.
Thanks.

If you look into the main OpenVPN site you could find a link to Zigg's site with Ovpn for PPC port. Forum is located on my server, so www.sq7ro.net gives you my personal website :wink:

Check if it is working. Comments are welcome.

Krzysztof

Bright · **Joined:** Thu Jul 13, 2006 5:42 am **Posts:** 7

I see the following bug:

There is an extra tab with name '[Thuis]' when I start a VPN connection. This connection cannot be seen in the list of running VPNs. Why?

I copied the .OVPN and keys from my laptop to my Qtek9000 and it almost instantaniously works. (must remove dev-tap because the name of the TAPdriver differs to the name in the laptop)

So, it seems to me the VPN does work, however, I cannot connect to Remote Desktop (with the error 'server is busy'). I know it works from my laptop when it is in the same network and using the regular OpenVPN version it works from any network.
What's the problem? I cannot see any shares of the machine on the other end of the VPN too.

I tried to get to my router page by using the local address and it seems something is sometimes working a tiny little but. Using Opera I get the 'Connecting' message, but no timeout. This seems to me there must be a connection, but the connection is extremely slow.
Hmm.. maybe not: Internet Explorer gives me an error that the connection was lost.

How can I test the connection? Is there a ping or something that I can try?

What about a gateway etc.? Where should they point to and should those be changed? And maybe setting some IPs to local (not using internet)?

ps: I do see a network card appearing when the VPN is established, but I cannot do anything with that.

Bright · **Joined:** Thu Jul 13, 2006 5:42 am **Posts:** 7

It might be nice to have a package with a real working sample (including key etc.) and a server with which we can test if the PPC-connection really does work.
Why this? Well, I know my set of files work perfectly on my laptop. They do not work on my PPC. Where is it going wrong? I don't know!

sq7ro · **Posted:** Fri Jul 14, 2006 7:55 am

Quote:

There is an extra tab with name '[Thuis]' when I start a VPN connection. This connection cannot be seen in the list of running VPNs. Why?

Beacuse the connection has not been established. Look into the log file in OpenVPN\Logs directory for more details. (You need to set the verb option to 4 in your client config
file.

Quote:

I copied the .OVPN and keys from my laptop to my Qtek9000 and it almost instantaniously works. (must remove dev-tap because the name of the TAPdriver differs to the name in the laptop)

Have you changed the paths for the key files in you client config file ?

Quote:

So, it seems to me the VPN does work, however, I cannot connect to Remote Desktop (with the error 'server is busy'). I know it works from my laptop when it is in the same network and using the regular OpenVPN version it works from any network.
What's the problem? I cannot see any shares of the machine on the other end of the VPN too.

How do you know the OpenVPn seems to work ? It has got an IP ? Connection has been completed without errors?

Quote:

I tried to get to my router page by using the local address and it seems something is sometimes working a tiny little but. Using Opera I get the 'Connecting' message, but no timeout. This seems to me there must be a connection, but the connection is extremely slow.
Hmm.. maybe not: Internet Explorer gives me an error that the connection was lost.

Opera may try to connect with very long timeout, so even if you does not have a connection it may try to connect. You should try to ping or traceroute the server.

Quote:

How can I test the connection? Is there a ping or something that I can try?

Of course, try Google to find vxutils.

Quote:

What about a gateway etc.? Where should they point to and should those be changed? And maybe setting some IPs to local (not using internet)?

All the IP's should be set by the server. There may be a problem with DNS, we have reported this option may not work properly on some devices/configs. No IP should be changed, if you do not use the changed IP on you laptop where the config is working. In a perfect world you should only copy the fils from working workstation,change the paths in clint config file and it should work. There ar some issues on GPRS, UMTS, but the problem has been described on the forum. You can test the connection via cable and ActiveSync (but proto must be set to TCP on clint and server side) or Wifi - this is the best way to make it work.

Quote:

ps: I do see a network card appearing when the VPN is established, but I cannot do anything with that.

The network card (I mean TAP DEVICE) should be available. If its state is different than that, you should try to find the problem.

sq7ro · **Posted:** Fri Jul 14, 2006 7:59 am

Bright wrote:

It might be nice to have a package with a real working sample (including key etc.) and a server with which we can test if the PPC-connection really does work.
Why this? Well, I know my set of files work perfectly on my laptop. They do not work on my PPC. Where is it going wrong? I don't know!

All the problem may be solved, but you need to type mor details. Sample file has been attached to the opvnppc package. If you have problems try to read th forum and Openvpn documentation.
If your files are working on your laptop they should work on PPC. You need to type them here, then we could give you a tip what may be wrong.

Bright · **Joined:** Thu Jul 13, 2006 5:42 am **Posts:** 7

Quote:

Beacuse the connection has not been established. Look into the log file in OpenVPN\Logs directory for more details. (You need to set the verb option to 4 in your client config file.

Hmm ... I have this in my log file:

Code:

Mon Jul 17 08:18:14 2006 us=373000 Current Parameter Settings:
Mon Jul 17 08:18:14 2006 us=375000   config = '\Program Files\OpenVPN\config\Thuis.ovpn'
Mon Jul 17 08:18:14 2006 us=376000   mode = 0
Mon Jul 17 08:18:14 2006 us=376000   show_ciphers = DISABLED
Mon Jul 17 08:18:14 2006 us=377000   show_digests = DISABLED
Mon Jul 17 08:18:14 2006 us=377000   show_engines = DISABLED
Mon Jul 17 08:18:14 2006 us=378000   genkey = DISABLED
Mon Jul 17 08:18:14 2006 us=378000   key_pass_file = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=381000   show_tls_ciphers = DISABLED
Mon Jul 17 08:18:14 2006 us=382000   proto = 0
Mon Jul 17 08:18:14 2006 us=382000   local = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=386000   remote_list[0] = {'80.100.64.81', 1194}
Mon Jul 17 08:18:14 2006 us=387000   remote_random = DISABLED
Mon Jul 17 08:18:14 2006 us=388000   local_port = 1194
Mon Jul 17 08:18:14 2006 us=388000   remote_port = 1194
Mon Jul 17 08:18:14 2006 us=389000   remote_float = DISABLED
Mon Jul 17 08:18:14 2006 us=389000   ipchange = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=390000   bind_local = DISABLED
Mon Jul 17 08:18:14 2006 us=391000   dev = 'tap'
Mon Jul 17 08:18:14 2006 us=392000   dev_type = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=392000   dev_node = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=393000   tun_ipv6 = DISABLED
Mon Jul 17 08:18:14 2006 us=393000   ifconfig_local = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=394000   ifconfig_remote_netmask = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=395000   ifconfig_noexec = DISABLED
Mon Jul 17 08:18:14 2006 us=395000   ifconfig_nowarn = DISABLED
Mon Jul 17 08:18:14 2006 us=396000   shaper = 0
Mon Jul 17 08:18:14 2006 us=396000   tun_mtu = 1500
Mon Jul 17 08:18:14 2006 us=397000   tun_mtu_defined = ENABLED
Mon Jul 17 08:18:14 2006 us=397000   link_mtu = 1500
Mon Jul 17 08:18:14 2006 us=398000   link_mtu_defined = DISABLED
Mon Jul 17 08:18:14 2006 us=399000   tun_mtu_extra = 32
Mon Jul 17 08:18:14 2006 us=399000   tun_mtu_extra_defined = ENABLED
Mon Jul 17 08:18:14 2006 us=400000   fragment = 0
Mon Jul 17 08:18:14 2006 us=400000   mtu_discover_type = -1
Mon Jul 17 08:18:14 2006 us=401000   mtu_test = 0
Mon Jul 17 08:18:14 2006 us=402000   mlock = DISABLED
Mon Jul 17 08:18:14 2006 us=402000   keepalive_ping = 0
Mon Jul 17 08:18:14 2006 us=403000   keepalive_timeout = 0
Mon Jul 17 08:18:14 2006 us=403000   inactivity_timeout = 0
Mon Jul 17 08:18:14 2006 us=404000   ping_send_timeout = 0
Mon Jul 17 08:18:14 2006 us=404000   ping_rec_timeout = 120
Mon Jul 17 08:18:14 2006 us=405000   ping_rec_timeout_action = 2
Mon Jul 17 08:18:14 2006 us=406000   ping_timer_remote = DISABLED
Mon Jul 17 08:18:14 2006 us=406000   remap_sigusr1 = 0
Mon Jul 17 08:18:14 2006 us=408000   explicit_exit_notification = 0
Mon Jul 17 08:18:14 2006 us=409000   persist_tun = ENABLED
Mon Jul 17 08:18:14 2006 us=410000   persist_local_ip = DISABLED
Mon Jul 17 08:18:14 2006 us=412000   persist_remote_ip = DISABLED
Mon Jul 17 08:18:14 2006 us=413000   persist_key = ENABLED
Mon Jul 17 08:18:14 2006 us=415000   mssfix = 1450
Mon Jul 17 08:18:14 2006 us=416000   resolve_retry_seconds = 1000000000
Mon Jul 17 08:18:14 2006 us=418000   connect_retry_seconds = 5
Mon Jul 17 08:18:14 2006 us=419000   username = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=421000   groupname = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=423000   chroot_dir = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=424000   cd_dir = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=424000   writepid = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=425000   up_script = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=426000   down_script = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=426000   down_pre = DISABLED
Mon Jul 17 08:18:14 2006 us=427000   up_restart = DISABLED
Mon Jul 17 08:18:14 2006 us=427000   up_delay = DISABLED
Mon Jul 17 08:18:14 2006 us=428000   daemon = DISABLED
Mon Jul 17 08:18:14 2006 us=429000   inetd = 0
Mon Jul 17 08:18:14 2006 us=429000   log = ENABLED
Mon Jul 17 08:18:14 2006 us=430000   suppress_timestamps = DISABLED
Mon Jul 17 08:18:14 2006 us=430000   nice = 0
Mon Jul 17 08:18:14 2006 us=431000   verbosity = 4
Mon Jul 17 08:18:14 2006 us=432000   mute = 0
Mon Jul 17 08:18:14 2006 us=432000   gremlin = 0
Mon Jul 17 08:18:14 2006 us=433000   status_file = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=433000   status_file_version = 1
Mon Jul 17 08:18:14 2006 us=434000   status_file_update_freq = 60
Mon Jul 17 08:18:14 2006 us=434000   occ = ENABLED
Mon Jul 17 08:18:14 2006 us=435000   rcvbuf = 0
Mon Jul 17 08:18:14 2006 us=435000   sndbuf = 0
Mon Jul 17 08:18:14 2006 us=436000   socks_proxy_server = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=437000   socks_proxy_port = 0
Mon Jul 17 08:18:14 2006 us=437000   socks_proxy_retry = DISABLED
Mon Jul 17 08:18:14 2006 us=438000   fast_io = DISABLED
Mon Jul 17 08:18:14 2006 us=438000   comp_lzo = ENABLED
Mon Jul 17 08:18:14 2006 us=439000   comp_lzo_adaptive = ENABLED
Mon Jul 17 08:18:14 2006 us=440000   route_script = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=440000   route_default_gateway = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=441000   route_noexec = DISABLED
Mon Jul 17 08:18:14 2006 us=442000   route_delay = 0
Mon Jul 17 08:18:14 2006 us=442000   route_delay_window = 30
Mon Jul 17 08:18:14 2006 us=443000   route_delay_defined = ENABLED
Mon Jul 17 08:18:14 2006 us=443000   management_addr = '127.0.0.1'
Mon Jul 17 08:18:14 2006 us=444000   management_port = 10000
Mon Jul 17 08:18:14 2006 us=444000   management_user_pass = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=446000   management_log_history_cache = 250
Mon Jul 17 08:18:14 2006 us=447000   management_echo_buffer_size = 100
Mon Jul 17 08:18:14 2006 us=447000   management_query_passwords = ENABLED
Mon Jul 17 08:18:14 2006 us=448000   management_hold = ENABLED
Mon Jul 17 08:18:14 2006 us=449000   shared_secret_file = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=449000   key_direction = 0
Mon Jul 17 08:18:14 2006 us=450000   ciphername_defined = ENABLED
Mon Jul 17 08:18:14 2006 us=450000   ciphername = 'BF-CBC'
Mon Jul 17 08:18:14 2006 us=451000   authname_defined = ENABLED
Mon Jul 17 08:18:14 2006 us=452000   authname = 'SHA1'
Mon Jul 17 08:18:14 2006 us=452000   keysize = 0
Mon Jul 17 08:18:14 2006 us=453000   engine = DISABLED
Mon Jul 17 08:18:14 2006 us=453000   replay = ENABLED
Mon Jul 17 08:18:14 2006 us=454000   mute_replay_warnings = DISABLED
Mon Jul 17 08:18:14 2006 us=454000   replay_window = 64
Mon Jul 17 08:18:14 2006 us=455000   replay_time = 15
Mon Jul 17 08:18:14 2006 us=456000   packet_id_file = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=456000   use_iv = ENABLED
Mon Jul 17 08:18:14 2006 us=457000   test_crypto = DISABLED
Mon Jul 17 08:18:14 2006 us=457000   tls_server = DISABLED
Mon Jul 17 08:18:14 2006 us=458000   tls_client = ENABLED
Mon Jul 17 08:18:14 2006 us=459000   key_method = 2
Mon Jul 17 08:18:14 2006 us=459000   ca_file = '\Program files\OpenVPN\config\ca.crt'
Mon Jul 17 08:18:14 2006 us=460000   dh_file = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=461000   cert_file = '\Program Files\OpenVPN\config\EllenLaptop.crt'
Mon Jul 17 08:18:14 2006 us=461000   priv_key_file = '\Program Files\OpenVPN\config\EllenLaptop.key'
Mon Jul 17 08:18:14 2006 us=462000   pkcs12_file = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=463000   cryptoapi_cert = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=463000   cipher_list = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=464000   tls_verify = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=464000   tls_remote = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=465000   crl_file = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=465000   ns_cert_type = 0
Mon Jul 17 08:18:14 2006 us=466000   tls_timeout = 2
Mon Jul 17 08:18:14 2006 us=467000   renegotiate_bytes = 0
Mon Jul 17 08:18:14 2006 us=467000   renegotiate_packets = 0
Mon Jul 17 08:18:14 2006 us=468000   renegotiate_seconds = 3600
Mon Jul 17 08:18:14 2006 us=468000   handshake_window = 60
Mon Jul 17 08:18:14 2006 us=469000   transition_window = 3600
Mon Jul 17 08:18:14 2006 us=469000   single_session = DISABLED
Mon Jul 17 08:18:14 2006 us=470000   tls_exit = DISABLED
Mon Jul 17 08:18:14 2006 us=471000   tls_auth_file = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=472000   server_network = 0.0.0.0
Mon Jul 17 08:18:14 2006 us=473000   server_netmask = 0.0.0.0
Mon Jul 17 08:18:14 2006 us=473000   server_bridge_ip = 0.0.0.0
Mon Jul 17 08:18:14 2006 us=474000   server_bridge_netmask = 0.0.0.0
Mon Jul 17 08:18:14 2006 us=475000   server_bridge_pool_start = 0.0.0.0
Mon Jul 17 08:18:14 2006 us=475000   server_bridge_pool_end = 0.0.0.0
Mon Jul 17 08:18:14 2006 us=476000   ifconfig_pool_defined = DISABLED
Mon Jul 17 08:18:14 2006 us=477000   ifconfig_pool_start = 0.0.0.0
Mon Jul 17 08:18:14 2006 us=477000   ifconfig_pool_end = 0.0.0.0
Mon Jul 17 08:18:14 2006 us=478000   ifconfig_pool_netmask = 0.0.0.0
Mon Jul 17 08:18:14 2006 us=479000   ifconfig_pool_persist_filename = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=479000   ifconfig_pool_persist_refresh_freq = 600
Mon Jul 17 08:18:14 2006 us=480000   ifconfig_pool_linear = DISABLED
Mon Jul 17 08:18:14 2006 us=481000   n_bcast_buf = 256
Mon Jul 17 08:18:14 2006 us=481000   tcp_queue_limit = 64
Mon Jul 17 08:18:14 2006 us=482000   real_hash_size = 256
Mon Jul 17 08:18:14 2006 us=482000   virtual_hash_size = 256
Mon Jul 17 08:18:14 2006 us=483000   client_connect_script = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=484000   learn_address_script = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=484000   client_disconnect_script = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=485000   client_config_dir = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=485000   ccd_exclusive = DISABLED
Mon Jul 17 08:18:14 2006 us=486000   tmp_dir = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=486000   push_ifconfig_defined = DISABLED
Mon Jul 17 08:18:14 2006 us=487000   push_ifconfig_local = 0.0.0.0
Mon Jul 17 08:18:14 2006 us=488000   push_ifconfig_remote_netmask = 0.0.0.0
Mon Jul 17 08:18:14 2006 us=488000   enable_c2c = DISABLED
Mon Jul 17 08:18:14 2006 us=489000   duplicate_cn = DISABLED
Mon Jul 17 08:18:14 2006 us=489000   cf_max = 0
Mon Jul 17 08:18:14 2006 us=490000   cf_per = 0
Mon Jul 17 08:18:14 2006 us=491000   max_clients = 1024
Mon Jul 17 08:18:14 2006 us=491000   max_routes_per_client = 256
Mon Jul 17 08:18:14 2006 us=492000   client_cert_not_required = DISABLED
Mon Jul 17 08:18:14 2006 us=492000   username_as_common_name = DISABLED
Mon Jul 17 08:18:14 2006 us=494000   auth_user_pass_verify_script = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=494000   auth_user_pass_verify_script_via_file = DISABLED
Mon Jul 17 08:18:14 2006 us=495000   client = ENABLED
Mon Jul 17 08:18:14 2006 us=495000   pull = ENABLED
Mon Jul 17 08:18:14 2006 us=496000   auth_user_pass_file = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=497000   show_net_up = DISABLED
Mon Jul 17 08:18:14 2006 us=497000   route_method = 0
Mon Jul 17 08:18:14 2006 us=498000   ip_win32_defined = DISABLED
Mon Jul 17 08:18:14 2006 us=499000   ip_win32_type = 3
Mon Jul 17 08:18:14 2006 us=499000   dhcp_masq_offset = 0
Mon Jul 17 08:18:14 2006 us=500000   dhcp_lease_time = 31536000
Mon Jul 17 08:18:14 2006 us=500000   tap_sleep = 0
Mon Jul 17 08:18:14 2006 us=501000   dhcp_options = DISABLED
Mon Jul 17 08:18:14 2006 us=502000   dhcp_renew = DISABLED
Mon Jul 17 08:18:14 2006 us=502000   dhcp_pre_release = DISABLED
Mon Jul 17 08:18:14 2006 us=503000   dhcp_release = DISABLED
Mon Jul 17 08:18:14 2006 us=503000   domain = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=504000   netbios_scope = '[UNDEF]'
Mon Jul 17 08:18:14 2006 us=505000   netbios_node_type = 0
Mon Jul 17 08:18:14 2006 us=505000   disable_nbt = DISABLED
Mon Jul 17 08:18:14 2006 us=510000 OpenVPN 2.0.5 Win32-MSVC++ [SSL] [LZO] built on Jun  2 2006
Mon Jul 17 08:18:14 2006 us=560000 MANAGEMENT: TCP Socket listening on 127.0.0.1:10000
Mon Jul 17 08:18:14 2006 us=563000 Need hold release from management interface, waiting...
Mon Jul 17 08:18:15 2006 us=8000 MANAGEMENT: Client connected from 127.0.0.1:10000
Mon Jul 17 08:18:15 2006 us=136000 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Mon Jul 17 08:18:15 2006 us=140000 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Jul 17 08:18:15 2006 us=464000 LZO compression initialized
Mon Jul 17 08:18:15 2006 us=491000 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jul 17 08:18:15 2006 us=502000 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Jul 17 08:18:15 2006 us=509000 Local Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Jul 17 08:18:15 2006 us=512000 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Jul 17 08:18:15 2006 us=513000 Local Options hash (VER=V4): 'd79ca330'
Mon Jul 17 08:18:15 2006 us=514000 Expected Remote Options hash (VER=V4): 'f7df56b8'
Mon Jul 17 08:18:15 2006 us=522000 Socket Buffers: R=[32768->32768] S=[16384->16384]
Mon Jul 17 08:18:15 2006 us=523000 UDPv4 link local (bound): [undef]
Mon Jul 17 08:18:15 2006 us=526000 UDPv4 link remote: 80.100.64.81:1194
Mon Jul 17 08:18:15 2006 us=716000 TLS: Initial packet from 80.100.64.81:1194, sid=057990b3 596c90aa
Mon Jul 17 08:18:16 2006 us=143000 VERIFY OK: depth=1, /C=NL/ST=UT/L=XXXX/O=Thuis/CN=thuis/emailAddress=XXXXXXXXXX
Mon Jul 17 08:18:16 2006 us=148000 VERIFY OK: depth=0, /C=NL/ST=UT/O=Thuis/CN=server/emailAddress=XXXXXXXXXXXXXX
Mon Jul 17 08:18:16 2006 us=880000 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 17 08:18:16 2006 us=882000 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 17 08:18:16 2006 us=883000 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 17 08:18:16 2006 us=884000 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 17 08:18:16 2006 us=889000 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Jul 17 08:18:16 2006 us=891000 [server] Peer Connection Initiated with 80.100.64.81:1194
Mon Jul 17 08:18:17 2006 us=972000 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon Jul 17 08:18:18 2006 us=76000 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.8.0.1,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0'
Mon Jul 17 08:18:18 2006 us=88000 OPTIONS IMPORT: timers and/or timeouts modified
Mon Jul 17 08:18:18 2006 us=91000 OPTIONS IMPORT: --ifconfig/up options modified
Mon Jul 17 08:18:18 2006 us=96000 OPTIONS IMPORT: route options modified
Mon Jul 17 08:18:18 2006 us=251000 TAP-WIN32 device [TAP1:] opened: TAP1:
Mon Jul 17 08:18:18 2006 us=254000 TAP-Win32 Driver Version 8.1 
Mon Jul 17 08:18:18 2006 us=256000 TAP-Win32 MTU=1500
Mon Jul 17 08:18:18 2006 us=259000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface TAP1: [DHCP-serv: 10.8.0.0, lease-time: 31536000]
Mon Jul 17 08:18:18 2006 us=302000 Successful ARP Flush on interface [3] TAP DEVICE 1
Mon Jul 17 08:18:18 2006 us=511000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Mon Jul 17 08:18:18 2006 us=512000 Route: Waiting for TUN/TAP interface to come up...
Mon Jul 17 08:18:18 2006 us=719000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Mon Jul 17 08:18:18 2006 us=720000 Route: Waiting for TUN/TAP interface to come up...
Mon Jul 17 08:18:20 2006 us=476000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Mon Jul 17 08:18:20 2006 us=477000 Route: Waiting for TUN/TAP interface to come up...
Mon Jul 17 08:18:20 2006 us=681000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Mon Jul 17 08:18:20 2006 us=682000 Route: Waiting for TUN/TAP interface to come up...
Mon Jul 17 08:18:21 2006 us=822000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Mon Jul 17 08:18:21 2006 us=824000 Route: Waiting for TUN/TAP interface to come up...
Mon Jul 17 08:18:22 2006 us=709000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Mon Jul 17 08:18:22 2006 us=714000 Route: Waiting for TUN/TAP interface to come up...
Mon Jul 17 08:18:23 2006 us=834000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Mon Jul 17 08:18:23 2006 us=837000 Route: Waiting for TUN/TAP interface to come up...
Mon Jul 17 08:18:24 2006 us=689000 TEST ROUTES: 0/0 succeeded len=-1 ret=1 a=0 u/d=up
Mon Jul 17 08:18:24 2006 us=691000 Initialization Sequence Completed

and I don't see anything strange in here (put XXXX in the certificate entries)

Quote:

Have you changed the paths for the key files in you client config file ?

Yes, and that works great (as you can see)

Quote:

How do you know the OpenVPn seems to work ? It has got an IP ? Connection has been completed without errors?

Yes, got an IP (10.8.0.2) and no errors.

Quote:

Opera may try to connect with very long timeout, so even if you does not have a connection it may try to connect. You should try to ping or traceroute the server.

I figured that would be a problem indeed.

Quote:

Of course, try Google to find vxutils.

I'll try and get it!

Quote:

All the IP's should be set by the server. There may be a problem with DNS, we have reported this option may not work properly on some devices/configs. No IP should be changed, if you do not use the changed IP on you laptop where the config is working. In a perfect world you should only copy the fils from working workstation,change the paths in clint config file and it should work. There ar some issues on GPRS, UMTS, but the problem has been described on the forum. You can test the connection via cable and ActiveSync (but proto must be set to TCP on clint and server side) or Wifi - this is the best way to make it work.

LOL - and I was thinking this world is perfect. I do have many fights with the stupic built in M$ connection stuff, but hey, who hasn't!

Quote:

The network card (I mean TAP DEVICE) should be available. If its state is different than that, you should try to find the problem.

This card is 'in use' in OpenVPN right after I try to connect.
IN the VPN tab I briefly see 'Thuis' waiting, but that disappears again, unfortunately.

Bright · **Joined:** Thu Jul 13, 2006 5:42 am **Posts:** 7

tried vxutils, but ping of anything within the local IP range is not possible. Ping the VPN server (10.8.0.1) does work, however.

I think there is a problem in the routing: the 10.8.0.X range should be seen as 10.0.0.X (internal), so tried to use:
route 10.8.0.0 255.255.255.0 10.0.0.1

But this does not work - even worse: the TAP1 network card does not show in the properties of the connections.

Still, the tab [Thuis] does show and there is nothing to be seen on the VPN tab.

I think this project is too complicated to really work; it was a hell just to create a correctly functionning VPN from my laptop and this trying to create a VPN from PPC only implements even more problems.

sq7ro · **Posted:** Mon Jul 17, 2006 8:22 am

I don't think the project is too complicated. Try to start using L2TP VPN under M$ with certificates. Here you can start the vpn just step by step like described on openvpn documentation. If you have stablished ovpn on your laptop you are able to do it on ppc, but you must keep on trying -there may be specific problems, and thre is no universal solution to all issues. If do not want to try, wait for another one who will do that using your PDA model. If you could post the config files on server and client side, maybe we could help you more.
I f you have connected and ping the server successfully, you are very close. Do you use routing or bridging on the server config?

Bright · **Joined:** Thu Jul 13, 2006 5:42 am **Posts:** 7

sq7ro wrote:

I don't think the project is too complicated. Try to start using L2TP VPN under M$ with certificates. Here you can start the vpn just step by step like described on openvpn documentation. If you have stablished ovpn on your laptop you are able to do it on ppc, but you must keep on trying -there may be specific problems, and thre is no universal solution to all issues. If do not want to try, wait for another one who will do that using your PDA model. If you could post the config files on server and client side, maybe we could help you more.
I f you have connected and ping the server successfully, you are very close. Do you use routing or bridging on the server config?

Well, I cannot connect to my server at the moment, so I cannot give you the config of that, but here is my client config:

Code:

client
dev tap
proto udp
remote XXX.XXX.XXX.XXX XXXX
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert Laptop.crt
key Laptop.key
comp-lzo
verb 4

And thank you for looking at my problem.

sq7ro · **Posted:** Thu Jul 20, 2006 7:45 am

Bright wrote:

Well, I cannot connect to my server at the moment, so I cannot give you the config of that, but here is my client config:

Code:

client
dev tap
proto udp
remote XXX.XXX.XXX.XXX XXXX
resolv-retry infinite
nobind
persist-key
persist-tun
[b]ca ca.crt
cert Laptop.crt
key Laptop.key[/b]
comp-lzo
verb 4

First of all - there is a problem with file paths. I have written of the forum few times, there should be a full path entered to the key/cert file. Your config part should look like this:

Code:

ca "\\Program FIles\\OpenVPN\\config\\ca.crt"
cert "\\Program FIles\\OpenVPN\\config\\Laptop.crt"
key "\\Program FIles\\OpenVPN\\config\\Laptop.key"

Set an proper paths to the config files, depending on your install directory (default \\Program Files\\OpenVPN\\config)

Check if it is working.

Bright · **Joined:** Thu Jul 13, 2006 5:42 am **Posts:** 7

Yes, I did change those (otherways I got a message that ca.crt could not be opened) so this is not the problem I see.

Also, when my server is not running, I get a correct error. When the server is running, the connection seems to work (icon changes to green and I have the [thuis] tab), but it does not show up on the list of running VPNs.

OpenVPN for PocketPC forum

Alpha 20060602a

Who is online