eduardotb
(usa CentOS)
Enviado em 20/11/2017 - 22:13h
LSSilva escreveu:
eduardotb escreveu:
Boa tarde,
Estou com problemas após a geração dos certificados do OpenVPN.
Hoje eu ja tenho o servidor com o openvpn rodando normalmente, porém os certificados estão prestes a expirar.
Agora quando fiz a geração dos novos certificados ca.ca, server.crt, server.csr, server.key e dh1024.pem a
interface tun não envia e nem recebe os pacotes. Acredito que o problema esteja nos certificados.
Alguém tem ideia do que pode ser?
Poderia postar os logs do server e de um cliente pra analisarmos?
Log do servidor:
Mon Nov 20 21:52:15 2017 OpenVPN 2.1.2 i686-pc-linux-gnu [SSL] [LZO2] [EPOLL] built on Aug 25 2010
Mon Nov 20 21:52:15 2017 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Nov 20 21:52:15 2017 Diffie-Hellman initialized with 1024 bit key
Mon Nov 20 21:52:15 2017 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Nov 20 21:52:15 2017 Socket Buffers: R=[110592->131072] S=[110592->131072]
Mon Nov 20 21:52:15 2017 ROUTE default_gateway=xxx.xxx.xxx.x
Mon Nov 20 21:52:15 2017 TUN/TAP device tun0 opened
Mon Nov 20 21:52:15 2017 TUN/TAP TX queue length set to 100
Mon Nov 20 21:52:15 2017 /sbin/ip link set dev tun0 up mtu 1500
Mon Nov 20 21:52:15 2017 /sbin/ip addr add dev tun0 local 10.0.0.1 peer 10.0.0.2
Mon Nov 20 21:52:15 2017 /sbin/ip route add 10.0.0.0/24 via 10.0.0.2
Mon Nov 20 21:52:15 2017 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Nov 20 21:52:15 2017 GID set to nobody
Mon Nov 20 21:52:15 2017 UID set to nobody
Mon Nov 20 21:52:15 2017 UDPv4 link local (bound): xxx.xxx.xxx.x:4999
Mon Nov 20 21:52:15 2017 UDPv4 link remote: [undef]
Mon Nov 20 21:52:15 2017 MULTI: multi_init called, r=256 v=256
Mon Nov 20 21:52:15 2017 IFCONFIG POOL: base=10.0.0.4 size=62
Mon Nov 20 21:52:15 2017 IFCONFIG POOL LIST
Mon Nov 20 21:52:15 2017 Initialization Sequence Completed
Mon Nov 20 21:53:44 2017 MULTI: multi_create_instance called
Mon Nov 20 21:53:44 2017 168.181.48.95:9108 Re-using SSL/TLS context
Mon Nov 20 21:53:44 2017 168.181.48.95:9108 LZO compression initialized
Mon Nov 20 21:53:44 2017 168.181.48.95:9108 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Nov 20 21:53:44 2017 168.181.48.95:9108 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Nov 20 21:53:44 2017 168.181.48.95:9108 Local Options hash (VER=V4): '530fdded'
Mon Nov 20 21:53:44 2017 168.181.48.95:9108 Expected Remote Options hash (VER=V4): '41690919'
Mon Nov 20 21:53:44 2017 168.181.48.95:9108 TLS: Initial packet from 168.181.48.95:9108, sid=c126361d 37c8169f
Log usuario:
Mon Nov 20 22:04:42 2017 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Mon Nov 20 22:04:42 2017 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Mon Nov 20 22:04:42 2017 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Nov 20 22:04:42 2017 LZO compression initialized
Mon Nov 20 22:04:42 2017 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Nov 20 22:04:42 2017 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Nov 20 22:04:42 2017 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Nov 20 22:04:42 2017 Local Options hash (VER=V4): '41690919'
Mon Nov 20 22:04:42 2017 Expected Remote Options hash (VER=V4): '530fdded'
Mon Nov 20 22:04:42 2017 UDPv4 link local: [undef]
Mon Nov 20 22:04:42 2017 UDPv4 link remote: ipservidor:4999
Mon Nov 20 22:04:42 2017 TLS: Initial packet from ipservidor:4999, sid=bbbbb087 fbe93a63
Mon Nov 20 22:04:43 2017 VERIFY OK: depth=1, /C=BR/ST=RS/L=ML/O=SCBR/emailAddress=meu@dominio
Mon Nov 20 22:04:43 2017 VERIFY OK: depth=0, /C=BR/ST=RS/O=SCBR/CN=server/emailAddress=meu@dominio
Interface tun
tun0 Link encap:Não Especificado Endereço de HW 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet end.: 10.0.0.1 P-a-P:10.0.0.2 Masc:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Métrica:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:100 errors:0 dropped:0 overruns:0 carrier:0
colisões:0 txqueuelen:100
RX bytes:0 (0.0 b) TX bytes:5440 (5.3 KiB)
