From mboxrd@z Thu Jan 1 00:00:00 1970 From: Tom Rymes To: development@lists.ipfire.org Subject: Re: Core 120 openvpn Date: Thu, 05 Jul 2018 08:09:05 -0400 Message-ID: <58156907-7F95-48FF-8752-EF35EF30D358@rymes.com> In-Reply-To: <3036b7899354be8400f6d0213ac6a6858756c252.camel@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============8309104747216648863==" List-Id: --===============8309104747216648863== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Alex, Did your problems appear after a pakfire upgrade to 120, or did you install 1= 20 and apply a backup from 119? Tom > On Jul 5, 2018, at 7:52 AM, ummeegge wrote: >=20 > Hi Alex, > i can not confirm one of these problems here, have seen also nobody > with that kind of problems in the forum after the update to Core 120. > Problems which has been occured where > - Too old CAs with MD5 in it which the new OpenVPN to not accept > anymore. > - DH-Parameter with 1024 bit which are also not accepted by OpenVPN > anymore. > - Missing Valid til Days value which the new OpenSSL do not accept > anymore. >=20 > I use 2.4.5 (meanwhile also 2.4.6 next update) for N2N and RWs on > updated machines but also fresh installed one=C2=B4s and have no problem at > all. There was also positive feedback in the forum and also a longer > testing period for this update whereby none of this problems occurs... >=20 > So am not sure where this comes from ?? >=20 > Cheers, >=20 > Erik >=20 >=20 > Am Donnerstag, den 05.07.2018, 05:40 +0200 schrieb Alexander Marx: >> Dear list, >>=20 >> after having trouble upgrading my IPFire 119 to 120 (all OpenVPN >> connections didn't work anymore) >> i downgraded again. >> Now i just upgraded my local linux os to Ubuntu 18.04 and my OpenVPN >> client was not able to connect anymore due to TLS/verification >> failure. >>=20 >> Ok i thought, lets start a fresh install and test if the new core 120 >> will do it. Now the hassle starts: >>=20 >> Installed core 120, made a new CA and created an OpenVPN roadwarrior >> connection. >>=20 >> I am NOT able to even import my OpenVPN connection into my OS because >> the config is not recognised as an OpenVPN connection?! >>=20 >> More investigation showed up that there are MISSING parts in the >> client-config. >> The config showed: >>=20 >> #OpenVPN Client conf >> tls-client >> client >> nobind >> dev tun >> proto udp >> tun-mtu=20 >> pkcs12 marx.p12 >> cipher=20 >> verb 3 >> ns-cert-type server >> verify-x509-name oabusv.dyndns.org name >>=20 >> Missing parts: >> 1) comp-lzo was not added >> 2) tun-mtu has no value (should be 1400 here) >> 3) "remote "" was missing completely >> 4) "cipher" has no value (should be AES-256-CBC here) >>=20 >> After adding these parts i was able to connect. >>=20 >> Can somebody confirm this? >>=20 >> I wonder if people are able to use IPFire with OpenVPN when using >> Core 120...... >>=20 >> Cheers, >>=20 >> Alex --===============8309104747216648863==--