OS/2, eCS & ArcaOS - Technical > Networking
openvpn configuration?
Paul Smedley:
Hi Bernard,
--- Quote from: Bernhard Pöttinger on October 08, 2019, 01:43:53 pm ---I tested your version 2.3 and it's working as expected. Thank's for the excelent work.
--- End quote ---
Great! Next step 2.4.7 - then to try get tun working .....
Cheers,
Paul
Doug Bissett:
--- Quote --- @Doug,
In the openvpn.zip file found on Hobbes, in the 'another' folder, there is a good cookbook for setting up a server and client on OS/2. I gave it a shot and it works great...
--- End quote ---
Hmmm. Yes, it does work, once you realize that this section is sort of misleading:
--- Quote ---Starting the client:
The client makes an outgoing connection to the server, so it shouldn't matter
if you are behind a Firewall/NAT. Making connections out through a http-
proxy is beyond the scope of this document (see openvpn.net).
You need to change 1 line in the client configuration file - client.ovpm -
before you can use it. Look for this line:
remote microsoft.com
and change the hostname to the hostname of the server you wich to connect to.
You can use an IP address instead, if you want to.
Save file, and start Openvpn client this way:
--- End quote ---
In client.ovpm, it is not "remote microsoft.com" it is "remote 10.3.3.54", and then you need to realize, that the address that you change it to is the address of the other machine that you wish to connect to, and that has nothing to do with the address range that is used by the virtual network.
In testing, I am using a machine on my local network, that has address 192.168.0.116 for the server, and another local machine at address 192.168.0.107 for the client. The virtual connection is 10.7.7.1 and 10.7.7.2, but that path travels over the local network on the local addresses. To go over the internet, you would need to use your outside IP address, and have port 1194 open in your router(s).
There has got to be a better way to describe this, but my main problem was that the "remote" statement in the instructions, was not what was in the sample client.ovpn.
Okay, now, to figure out how to actually use this thing. :o
Thanks...
BTW, I got Paul's 20191008 version, and it works too, now that I have decoded the instructions. There are a few warning messages, about security, that I need to figure out, but it seems to connect okay.
Paul Smedley:
--- Quote from: Doug Bissett on October 09, 2019, 04:36:11 am ---BTW, I got Paul's 20191008 version, and it works too, now that I have decoded the instructions. There are a few warning messages, about security, that I need to figure out, but it seems to connect okay.
--- End quote ---
Assuming you're talking about:
Tue Oct 8 19:06:02 2019 WARNING: file 'pass.txt' is group or others accessible
That should be addressed (actually just suppressed per WIN32) in http://smedley.id.au/tmp/openvpn-2.3.18-os2-20191009.zip
Doug Bissett:
--- Quote ---Assuming you're talking about:
Tue Oct 8 19:06:02 2019 WARNING: file 'pass.txt' is group or others accessible
--- End quote ---
I don't think so. This is what I see, when starting the server, or the client (this is from the client):
--- Code: ---[W:\TOOLS\OPENVPN]OpenVPN.exe client.ovpn
Wed Oct 9 15:14:39 2019 OpenVPN 2.3.18 i386-pc-os2-emx [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Oct 7 2019
Wed Oct 9 15:14:39 2019 library versions: OpenSSL 1.0.2n 7 Dec 2017, LZO 2.04
Wed Oct 9 15:14:39 2019 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
Wed Oct 9 15:14:39 2019 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
dev_node = (null)
Wed Oct 9 15:14:39 2019 UDPv4 link local (bound): [undef]
sem reset rc=300
Wed Oct 9 15:14:39 2019 UDPv4 link remote: [AF_INET]192.168.0.107:1194
Wed Oct 9 15:14:50 2019 Peer Connection Initiated with [AF_INET]192.168.0.107:1194
Wed Oct 9 15:14:51 2019 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Oct 9 15:14:51 2019 Initialization Sequence Completed
--- End code ---
It does work, but it seems that the program is suggesting that better security settings should be used. I am using the suggested setup from the "another" directory in the openvpn package, from HOBBES, updated to the new openvpn.exe, and minimally modified to match my local network. It looks like a good place to start, but I need to figure out what to change, to make it happy (LOW priority on my part).
Doug Bissett:
--- Quote ---That should be addressed (actually just suppressed per WIN32) in http://smedley.id.au/tmp/openvpn-2.3.18-os2-20191009.zip
--- End quote ---
I downloaded this file, and the Archive Tool says the data is invalid.
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version