Hi All,
I am able to get my OpenVPN instance to start but I am unable to connect. I believe it has something to do with the ta.key that is setup. I followed along this guide:
https://wiki.openwrt.org/doc/howto/openvpn-streamlined-server-setup?rev=1476474996
I am a little confused on how to setup a client to connect. I normally make a .ovpn file and connect to my other servers. I don't know what to do with the ta.key, however.
Here is the output of my openvpn.log file:
root@LEDE:/tmp# /etc/init.d/openvpn start ; sleep 2 ; cat /tmp/openvpn.log
Sun Oct 22 10:44:40 2017 us=167172 OpenVPN 2.4.3 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
Sun Oct 22 10:44:40 2017 us=167253 library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09
Sun Oct 22 10:44:40 2017 us=168210 Diffie-Hellman initialized with 4096 bit key
Sun Oct 22 10:44:40 2017 us=182111 TLS-Auth MTU parms [ L:24122 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sun Oct 22 10:44:40 2017 us=186754 TUN/TAP device tun0 opened
Sun Oct 22 10:44:40 2017 us=186902 TUN/TAP TX queue length set to 100
Sun Oct 22 10:44:40 2017 us=187020 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sun Oct 22 10:44:40 2017 us=187139 /sbin/ifconfig tun0 10.1.1.1 netmask 255.255.255.0 mtu 24000 broadcast 10.1.1.255
Sun Oct 22 10:44:40 2017 us=190868 Data Channel MTU parms [ L:24122 D:24122 EF:122 EB:4156 ET:0 EL:3 ]
Sun Oct 22 10:44:40 2017 us=191070 Could not determine IPv4/IPv6 protocol. Using AF_INET
Sun Oct 22 10:44:40 2017 us=191168 Socket Buffers: R=[163840->327680] S=[163840->327680]
Sun Oct 22 10:44:40 2017 us=191255 UDPv4 link local (bound): [AF_INET][undef]:1194
Sun Oct 22 10:44:40 2017 us=191310 UDPv4 link remote: [AF_UNSPEC]
Sun Oct 22 10:44:40 2017 us=191364 GID set to nogroup
Sun Oct 22 10:44:40 2017 us=191416 UID set to nobody
Sun Oct 22 10:44:40 2017 us=191466 MULTI: multi_init called, r=256 v=256
Sun Oct 22 10:44:40 2017 us=191542 IFCONFIG POOL: base=10.1.1.2 size=252, ipv6=0
Sun Oct 22 10:44:40 2017 us=192087 Initialization Sequence Completed
and Here is some of the log file when trying to connect the client:
Sun Oct 22 10:57:06 2017 us=751847 66.87.80.182:31013 Control Channel MTU parms [ L:24122 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sun Oct 22 10:57:06 2017 us=751924 66.87.80.182:31013 Data Channel MTU parms [ L:24122 D:24122 EF:122 EB:4156 ET:0 EL:3 ]
Sun Oct 22 10:57:06 2017 us=751989 66.87.80.182:31013 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 84 bytes
Sun Oct 22 10:57:06 2017 us=752033 66.87.80.182:31013 calc_options_string_link_mtu: link-mtu 24122 -> 24086
Sun Oct 22 10:57:06 2017 us=752115 66.87.80.182:31013 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 84 bytes
Sun Oct 22 10:57:06 2017 us=752159 66.87.80.182:31013 calc_options_string_link_mtu: link-mtu 24122 -> 24086
Sun Oct 22 10:57:06 2017 us=752225 66.87.80.182:31013 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 24086,tun-mtu 24000,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA384,keysize 256,key-method 2,tls-server'
Sun Oct 22 10:57:06 2017 us=752269 66.87.80.182:31013 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 24086,tun-mtu 24000,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA384,keysize 256,key-method 2,tls-client'
Sun Oct 22 10:57:06 2017 us=752375 66.87.80.182:31013 UDPv4 READ [42] from [AF_INET]66.87.80.182:31013: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 3074038870 3112456824 3867870442 2144522991 1972282624 345 3971072256 0 ]
Sun Oct 22 10:57:06 2017 us=752446 66.87.80.182:31013 TLS: Initial packet from [AF_INET]66.87.80.182:31013, sid=388b5d19 eff64abd
Sun Oct 22 10:57:06 2017 us=752492 66.87.80.182:31013 TLS Error: reading acknowledgement record from packet
Sun Oct 22 10:57:06 2017 us=752580 66.87.80.182:31013 UDPv4 WRITE [14] to [AF_INET]66.87.80.182:31013: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sun Oct 22 10:57:08 2017 us=601779 66.87.80.182:31013 UDPv4 READ [42] from [AF_INET]66.87.80.182:31013: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 3074038870 3112456824 3867870442 2144522991 1972282624 345 3971072256 0 ]
Sun Oct 22 10:57:08 2017 us=601860 66.87.80.182:31013 TLS Error: reading acknowledgement record from packet
Sun Oct 22 10:57:08 2017 us=601950 66.87.80.182:31013 UDPv4 WRITE [14] to [AF_INET]66.87.80.182:31013: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sun Oct 22 10:57:10 2017 us=602625 66.87.80.182:31013 UDPv4 READ [42] from [AF_INET]66.87.80.182:31013: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 3074038870 3112456824 3867870442 2144522991 1972282624 345 3971072256 0 ]
Sun Oct 22 10:57:10 2017 us=602705 66.87.80.182:31013 TLS Error: reading acknowledgement record from packet
Sun Oct 22 10:57:12 2017 us=602354 66.87.80.182:31013 UDPv4 READ [42] from [AF_INET]66.87.80.182:31013: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 3074038870 3112456824 3867870442 2144522991 1972282624 345 3971072256 0 ]
Sun Oct 22 10:57:12 2017 us=602430 66.87.80.182:31013 TLS Error: reading acknowledgement record from packet
Sun Oct 22 10:57:12 2017 us=602520 66.87.80.182:31013 UDPv4 WRITE [14] to [AF_INET]66.87.80.182:31013: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sun Oct 22 10:57:14 2017 us=601464 66.87.80.182:31013 UDPv4 READ [42] from [AF_INET]66.87.80.182:31013: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 3074038870 3112456824 3867870442 2144522991 1972282624 345 3971072256 0 ]
Sun Oct 22 10:57:14 2017 us=601553 66.87.80.182:31013 TLS Error: reading acknowledgement record from packet