Problème VPN

Ce site est optimisé pour être consulté depuis un navigateur moderne dans lequel JavaScript est activé.

Problème VPN

bryann705

Bonsoir,

désolé de vous déranger, voilà j'ai reçu une nouvelle machine VPS, et j'ai voulu installer à l'aide d'un script se trouvant ici https://github.com/Nyr/openvpn-install un serveur vpn malheureusement cela ne marche plus (car avec Wheezy cela marchait mais depuis Jessie apparemment non... j'ai copié le fichier des logs du client windows, que vous trouverez ci-dessous :

Sat May 30 02:12:04 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Mar 19 2015
Sat May 30 02:12:04 2015 library versions: OpenSSL 1.0.1m 19 Mar 2015, LZO 2.08
Enter Management Password:
Sat May 30 02:12:04 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sat May 30 02:12:04 2015 Need hold release from management interface, waiting...
Sat May 30 02:12:04 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sat May 30 02:12:04 2015 MANAGEMENT: CMD 'state on'
Sat May 30 02:12:04 2015 MANAGEMENT: CMD 'log all on'
Sat May 30 02:12:04 2015 MANAGEMENT: CMD 'hold off'
Sat May 30 02:12:04 2015 MANAGEMENT: CMD 'hold release'
Sat May 30 02:12:04 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sat May 30 02:12:04 2015 UDPv4 link local: [undef]
Sat May 30 02:12:04 2015 UDPv4 link remote: [AF_INET]MONIP:1194
Sat May 30 02:12:04 2015 MANAGEMENT: >STATE:1432937524,WAIT,,,
Sat May 30 02:12:04 2015 MANAGEMENT: >STATE:1432937524,AUTH,,,
Sat May 30 02:12:04 2015 TLS: Initial packet from [AF_INET]MONIP:1194, sid=8b1d706f d0101999
Sat May 30 02:12:09 2015 VERIFY ERROR: depth=1, error=certificate is not yet valid: C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Sat May 30 02:12:09 2015 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Sat May 30 02:12:09 2015 TLS Error: TLS object -> incoming plaintext read error
Sat May 30 02:12:09 2015 TLS Error: TLS handshake failed
Sat May 30 02:12:09 2015 SIGUSR1[soft,tls-error] received, process restarting
Sat May 30 02:12:09 2015 MANAGEMENT: >STATE:1432937529,RECONNECTING,tls-error,,
Sat May 30 02:12:09 2015 Restart pause, 2 second(s)
Sat May 30 02:12:11 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sat May 30 02:12:11 2015 UDPv4 link local: [undef]
Sat May 30 02:12:11 2015 UDPv4 link remote: [AF_INET]MONIP:1194
Sat May 30 02:12:11 2015 MANAGEMENT: >STATE:1432937531,WAIT,,,
Sat May 30 02:12:11 2015 MANAGEMENT: >STATE:1432937531,AUTH,,,
Sat May 30 02:12:11 2015 TLS: Initial packet from [AF_INET]MONIP:1194, sid=422e18ab b7bdc2b8
Sat May 30 02:12:13 2015 VERIFY ERROR: depth=1, error=certificate is not yet valid: C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Sat May 30 02:12:13 2015 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Sat May 30 02:12:13 2015 TLS Error: TLS object -> incoming plaintext read error
Sat May 30 02:12:13 2015 TLS Error: TLS handshake failed
Sat May 30 02:12:13 2015 SIGUSR1[soft,tls-error] received, process restarting
Sat May 30 02:12:13 2015 MANAGEMENT: >STATE:1432937533,RECONNECTING,tls-error,,
Sat May 30 02:12:13 2015 Restart pause, 2 second(s)
Sat May 30 02:12:14 2015 SIGTERM[hard,init_instance] received, process exiting
Sat May 30 02:12:14 2015 MANAGEMENT: >STATE:1432937534,EXITING,init_instance,,

là je comprends rien... Alors si ça peut aider je ne sais pas j'ai fait comme installation pour le moment :
H5ai : http://mondedie.fr/d/5716
Script d'installation rutorrent : http://mondedie.fr/d/5399

Vous remerciant

Majax

Message supprimé.

bryann705

Salut

Merci de ta réponse. ^^ j'ai déjà essayé également sur celui-ci d’ailleurs je crois qu'il renvoie sur le premier liens que j'ai cité.

Majax

Message supprimé.

bryann705

Ah zut, je suis pas du doué pour ça ><

Tiens voilà :

~/www/www/base# apt-get install easy-rsa
Reading package lists... Done
Building dependency tree
Reading state information... Done
easy-rsa is already the newest version.
easy-rsa set to manually installed.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
~/www/www/base# cp -R /usr/share/easy-rsa/* easy-rsa/
cp: target 'easy-rsa/' is not a directory

as tu des tutoriels pour ça stp?

Majax

Message supprimé.

bryann705

Ah en effet... me reste plus qu'à attendre quoi c'est ça ? x)

Majax

Message supprimé.

bryann705

Pareil .. là je suis dans l'impasse.... aussi x) .. hum merci de ton aide en tout cas

Edit : Je repasse sous Wheezy je te tiens au courant

Edit : je suis désespéré >< .. avec le script que vous m'aviez données.

: ERROR while getting interface flags: No such device
SIOCSIFDSTADDR: No such device
: ERROR while getting interface flags: No such device
SIOCSIFMTU: No such device
 failed!

Edit j'ai désactiver / activer TUN/TAP

maintenant dans mon log pour le client windows j'ai

Sat May 30 04:17:46 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Mar 19 2015
Sat May 30 04:17:46 2015 library versions: OpenSSL 1.0.1m 19 Mar 2015, LZO 2.08
Enter Management Password:
Sat May 30 04:17:46 2015 MANAGEMENT: Socket bind failed on local address [AF_INET]127.0.0.1:25340: Address already in use (WSAEADDRINUSE)
Sat May 30 04:17:46 2015 Exiting due to fatal error

edit : j'ai désinstaller réinstaller openvpn sur mon windows j'ai maintenant ces erreures

Sat May 30 04:39:23 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Mar 19 2015
Sat May 30 04:39:23 2015 library versions: OpenSSL 1.0.1m 19 Mar 2015, LZO 2.08
Enter Management Password:
Sat May 30 04:39:23 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sat May 30 04:39:23 2015 Need hold release from management interface, waiting...
Sat May 30 04:39:24 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sat May 30 04:39:24 2015 MANAGEMENT: CMD 'state on'
Sat May 30 04:39:24 2015 MANAGEMENT: CMD 'log all on'
Sat May 30 04:39:24 2015 MANAGEMENT: CMD 'hold off'
Sat May 30 04:39:24 2015 MANAGEMENT: CMD 'hold release'
Sat May 30 04:39:24 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sat May 30 04:39:24 2015 UDPv4 link local: [undef]
Sat May 30 04:39:24 2015 UDPv4 link remote: [AF_INET]MONIP:1194
Sat May 30 04:39:24 2015 MANAGEMENT: >STATE:1432946364,WAIT,,,
Sat May 30 04:39:24 2015 MANAGEMENT: >STATE:1432946364,AUTH,,,
Sat May 30 04:39:24 2015 TLS: Initial packet from [AF_INET]MONIP:1194, sid=7b7be72d c7f04b1c
Sat May 30 04:39:26 2015 VERIFY ERROR: depth=1, error=certificate is not yet valid: C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Sat May 30 04:39:26 2015 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Sat May 30 04:39:26 2015 TLS Error: TLS object -> incoming plaintext read error
Sat May 30 04:39:26 2015 TLS Error: TLS handshake failed
Sat May 30 04:39:26 2015 SIGUSR1[soft,tls-error] received, process restarting
Sat May 30 04:39:26 2015 MANAGEMENT: >STATE:1432946366,RECONNECTING,tls-error,,
Sat May 30 04:39:26 2015 Restart pause, 2 second(s)
Sat May 30 04:39:28 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sat May 30 04:39:28 2015 UDPv4 link local: [undef]
Sat May 30 04:39:28 2015 UDPv4 link remote: [AF_INET]MONIP:1194
Sat May 30 04:39:28 2015 MANAGEMENT: >STATE:1432946368,WAIT,,,
Sat May 30 04:39:28 2015 MANAGEMENT: >STATE:1432946368,AUTH,,,
Sat May 30 04:39:28 2015 TLS: Initial packet from [AF_INET]MONIP:1194, sid=8e5a5c15 b3f2252d
Sat May 30 04:39:30 2015 VERIFY ERROR: depth=1, error=certificate is not yet valid: C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Sat May 30 04:39:30 2015 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Sat May 30 04:39:30 2015 TLS Error: TLS object -> incoming plaintext read error
Sat May 30 04:39:30 2015 TLS Error: TLS handshake failed
Sat May 30 04:39:30 2015 SIGUSR1[soft,tls-error] received, process restarting
Sat May 30 04:39:30 2015 MANAGEMENT: >STATE:1432946370,RECONNECTING,tls-error,,
Sat May 30 04:39:30 2015 Restart pause, 2 second(s)
Sat May 30 04:39:32 2015 SIGTERM[hard,init_instance] received, process exiting
Sat May 30 04:39:32 2015 MANAGEMENT: >STATE:1432946372,EXITING,init_instance,,

C'est vraiment important qu'OpenVPn marche >< et c'est bizarrement celui qui déconne ... (Au passage on retourne sur l'erreur du début j'ai réinitialiser ma machine pour rien ><)

bmth

Retourne sous Wheezy, t'auras moins de probs qu'avec Jessie..

bryann705

Justement là je suis sous Wheezy x:

alléluia j'ai tenter de me reconnecter... et là ça marche x) WTF?!

Edit : Maintenant il faut savoir d'où venais le soucis...