meta data for this page
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
linux:openvpn [2018/12/08 17:09] – [Troubleshooting] niziak | linux:openvpn [2020/07/03 08:30] – niziak | ||
---|---|---|---|
Line 1: | Line 1: | ||
+ | ====== OpenVPN ====== | ||
+ | |||
====== Installation ====== | ====== Installation ====== | ||
- | | + | |
- | * Enable autostart ALL or specified configs in ''/ | + | * Start openvpn services <code bash> |
- | * Generate systemd services from openvon configs <code bash> | + | systemctl start openvpn-client@config-name |
- | * Start openvpn services <code bash> | + | systemctl status openvpn-client@config-name |
+ | systemctl enable openvpn-client@config-name | ||
+ | </ | ||
+ | |||
+ | ===== issue ===== | ||
+ | < | ||
+ | openvpn[281925]: | ||
+ | openvpn[281924]: | ||
+ | </ | ||
+ | |||
+ | Solution: | ||
+ | <file | / | ||
+ | [Service] | ||
+ | ExecStart= | ||
+ | ExecStart=/ | ||
+ | %i.conf | ||
+ | </ | ||
+ | |||
+ | |||
+ | ===== Deprecated ===== | ||
+ | |||
+ | * Put client | ||
+ | * Enable autostart ALL or specified configs in ''/ | ||
+ | * Generate systemd services from openvon configs <code bash> | ||
+ | * Start openvpn services <code bash> | ||
+ | |||
+ | ====== Certifcates ====== | ||
+ | * CA has to be with < | ||
+ | * basicConstraints | ||
+ | * nsCertType | ||
+ | * keyUsage | ||
+ | * subjectKeyIdentifier | ||
+ | * authorityKeyIdentifier | ||
+ | * OpenVPN Server | ||
+ | * basicConstraints | ||
+ | * subjectKeyIdentifier | ||
+ | * authorityKeyIdentifier | ||
+ | * nsCertType | ||
+ | * keyUsage | ||
+ | * extendedKeyUsage | ||
+ | * OpenVPN Client | ||
+ | * basicConstraints | ||
+ | * subjectKeyIdentifier | ||
+ | * authorityKeyIdentifier | ||
+ | * nsCertType | ||
+ | * keyUsage | ||
+ | * extendedKeyUsage | ||
====== Configuration ====== | ====== Configuration ====== | ||
Line 80: | Line 128: | ||
MinProtocol = TLSv1 | MinProtocol = TLSv1 | ||
</ | </ | ||
+ | |||
+ | **Error**: File transfer stuck | ||
+ | **Cause**: File transfer are using maximum packet size, which probably cannot fit to MTU limitataions | ||
+ | **Solution**: | ||
+ | < | ||
+ | # On one side of connection | ||
+ | mssfix 1400 | ||
+ | |||
+ | # MTU on tunX interface | ||
+ | # has to be set on both sides | ||
+ | tun-mtu 1400 | ||
+ | </ | ||
+ | |||
+ | More: | ||
+ | * [[https:// | ||
+ | * [[https:// | ||
====== rsyslog ====== | ====== rsyslog ====== | ||
<file txt / | <file txt / |