I have been trying to set up multiple OpenVPN Client files for use on multiple computers.
The guide I am following is : https://www.digitalocean.com/community/tutorials/how-to-setup-and-configure-an-openvpn-server-on-centos-7
One of the instructions while setting up is as follows:
Make sure that if you do this you give them descriptive names, but for now we’re going to have one client so we’ll just call it client.
cd /etc/openvpn/easy-rsa ./build-key client
As such, I simply ran the buildkey with different client names (client00,client01 etc.).
The config file I have modified as such:
client00
dev tun
proto udp
remote x.x.x.x 1194
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo
verb 3
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
</key>
However the GUI gets stuck on connecting.
I ran the CMD
Options error: Unrecognized option or missing parameter(s) in client00.ovpn:1: client00 (2.3.10)
What am i doing wrong?
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
:)) how did you manage to paste the whole certificates?
Anyway, I have almost the same problem, except the fact that my error is in other file. Error log: Thu Oct 12 02:18:58 2017 username_afk/73...*:48664 Options error: Unrecognized option or missing or extra parameter(s) in clients/username_afk:1: username_afk (2.4.0)
I’ve assigned a specific IP addresses to specific clients, I use the subdirectory “clients” for client-specific configuration files. The error appears in a client-specific configuration file, first line.
[root@hosted log]# cat /etc/openvpn/clients/username_afk username_afk ifconfig-push 10.127.0.5 255.255.0.0 [root@hosted log]#
My problem is: If I remove this first line (containing the username) the error in the log dissapears, but client is not assigned with a desired IP address.
How can I deal with this one, does anyone know?
I leaved with just one line in the file and it looks like this:
[root@hostedcore ~]# grep client-config /etc/openvpn/hostedcore.conf
client-config-dir clients
[root@hostedcore ~]#
[root@hostedcore ~]# cat /etc/openvpn/clients/yatebts_com
ifconfig-push 10.12.0.5 255.255.128.0
[root@hostedcore ~]#
There are two things you’ve done wrong - the first is to post a complete configuration for your server! You’ve taken out your IP address, but your domain name can still be pulled out of those certificates. I’d change those immediately, if I were you.
But in the configuration, “client” at the beginning is not the client name, it indicates that the .ovpn file is a client configuration, and not a server one. The actual client name is encoded in one of the certificates.
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
Full documentation for every DigitalOcean product.
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
Stay up to date by signing up for DigitalOcean’s Infrastructure as a Newsletter.
New accounts only. By submitting your email you agree to our Privacy Policy
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.