0

I have a raspberry pi which I intend to use as a vpn proxy while on public networks. I followed this guide (http://www.raspberrypi.org/forums/viewtopic.php?f=36&t=81657) to set up openvpn on the PI, but I can not connect to it. I have tried connecting from both OS X and Ubuntu and have the correct ports open. The PI responds to ping as well.

Can anyone tell me what I am missing? The shared key is present on both the server and client and the .conf files are just the way the are given in the tutorial.

The logs are given in a comment below:

Improve this question
1

1 Answer 1

Reset to default
2

The server config in the tutorial is missing the reference to the tls-auth key, so you client is sending tls packets with an extra HMAC, but your server is not expecting that extra HMAC. Using tls-auth is a very good idea, so to fix this, add the following line to you server config to enable tls-auth:

tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0

This adds the tls-auth key with 'key-direction 0' (which should be the opposite of the client, which has 'key-direction 1' in the client config file of your tutorial).

Improve this answer
0

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .