Administrace komentářů

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh.pem
server 10.8.0.0 255.255.255.0
client-config-dir /etc/openvpn/ccd
keepalive 10 120
tls-auth ta.key 0 # This file is secret
cipher AES-256-CBC
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn/openvpn-status.log
log         /var/log/openvpn/openvpn.log
log-append  /var/log/openvpn/openvpn.log
verb 3
explicit-exit-notify 1

tail /var/log/openvpn/openvpn.log
Mon Jan 17 21:46:50 2022 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Mon Jan 17 21:46:50 2022 Could not determine IPv4/IPv6 protocol. Using AF_INET
Mon Jan 17 21:46:50 2022 Socket Buffers: R=[163840->163840] S=[163840->163840]
Mon Jan 17 21:46:50 2022 UDPv4 link local (bound): [AF_INET][undef]:1194
Mon Jan 17 21:46:50 2022 UDPv4 link remote: [AF_UNSPEC]
Mon Jan 17 21:46:50 2022 GID set to nogroup
Mon Jan 17 21:46:50 2022 UID set to nobody
Mon Jan 17 21:46:50 2022 MULTI: multi_init called, r=256 v=256
Mon Jan 17 21:46:50 2022 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Mon Jan 17 21:46:50 2022 Initialization Sequence Completed

dev tun
proto udp
remote 90.64.250.169 1194
route-nopull
pull-filter ignore "dhcp-option DNS"
;resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
ca /etc/openvpn/client/ca.crt
cert /etc/openvpn/client/mikilap.crt
key /etc/openvpn/client/mikilap.key
;remote-cert-tls server
tls-auth /etc/openvpn/client/ta.key 1
cipher AES-256-CBC
status /var/log/openvpn/openvpn-status.log
log         /var/log/openvpn/openvpn.log
log-append  /var/log/openvpn/openvpn.log
verb 3

systemctl status openvpn@client
● openvpn@client.service - OpenVPN connection to client
   Loaded: loaded (/lib/systemd/system/openvpn@.service; enabled; vendor preset: enabled)
   Active: activating (auto-restart) (Result: exit-code) since Mon 2022-01-17 21:41:03 CET; 1s ago
     Docs: man:openvpn(8)
           https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
           https://community.openvpn.net/openvpn/wiki/HOWTO
  Process: 1292 ExecStart=/usr/sbin/openvpn --daemon ovpn-client --status /run/openvpn/client.status 10 --cd /etc/openvpn --config /etc/openvpn/client.conf --writepid /
 Main PID: 1292 (code=exited, status=1/FAILURE)

jan 17 21:41:03 debian systemd[1]: Failed to start OpenVPN connection to client.