Community discussions

MikroTik App
 
maara
newbie
Topic Author
Posts: 44
Joined: Fri Jun 10, 2011 8:42 am

Openvpn + certificates not working

Mon Jan 23, 2012 11:04 am

Hi all,

I need your help... :-(
Recently I decided to create an openvpn server on my 433uah. I started with a simple password authorized ovpn server which worked fine. Because of the improved security and simplicity a followed some of the tutorials and tried to switch the connection to be authorized by the certificates.. In general - I made an authority, created and signed server and client certificates, uploaded and unlocked the certificates to the mikrotik, changed the connection and client preferences and........nothing happend......
I am not able to connect
Checking reachability status of connection...
Connection is reachable. Starting connection attempt.
Jan 23 09:50:59: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Jan 23 09:50:59: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Jan 23 09:50:59: LZO compression initialized
Jan 23 09:50:59: Attempting to establish TCP connection with xzy:1194 [nonblock]
Jan 23 09:51:00: TCP connection established with xzy:1194
Jan 23 09:51:00: TCPv4_CLIENT link local: [undef]
Jan 23 09:51:00: TCPv4_CLIENT link remote: xzy:1194
Jan 23 09:51:01: Connection reset, restarting [0]
Jan 23 09:51:01: SIGUSR1[soft,connection-reset] received, process restarting
Jan 23 09:51:01: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Jan 23 09:51:01: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Jan 23 09:51:01: Re-using SSL/TLS context
Jan 23 09:51:01: LZO compression initialized
Jan 23 09:51:01: Attempting to establish TCP connection with xzy:1194 [nonblock]
Jan 23 09:51:02: TCP: connect to xzy:1194 failed, will try again in 5 seconds: Connection refused
Jan 23 09:51:08: TCP connection established with xzy:1194
Jan 23 09:51:08: TCPv4_CLIENT link local: [undef]
Jan 23 09:51:08: TCPv4_CLIENT link remote: xzy:1194
Jan 23 09:51:10: Connection reset, restarting [0]
Jan 23 09:51:10: SIGUSR1[soft,connection-reset] received, process restarting
I tried to recreate the certificates few times to make sure they are ok...
The log on the mikrotik shows simply messages like "dialing, using encoding df-128-cbc/sha1, tcp connection established, disconnected" but not any real error message....


Any idea?

Thanks for any help
 
Greenkolomna
just joined
Posts: 4
Joined: Sat Apr 02, 2011 12:02 pm

Re: Openvpn + certificates not working

Tue Jan 24, 2012 9:32 am

Точно такая же проблема и у меня, не могу ни как разобраться что делать???
 
User avatar
stmx38
Long time Member
Long time Member
Posts: 654
Joined: Thu Feb 14, 2008 4:03 pm
Location: Moldova, Chisinau

Re: Openvpn + certificates not working

Tue Jan 24, 2012 2:39 pm

maara
As I know Mikrotik not support certificate based authentication.
Mikrotik RB1200 as VPN Solution

Greenkolomna
насколько мне известно Mikrotik OpenVPN не поддерживает уатентификацию по сертификатам. смотри сссылку выше.
 
maara
newbie
Topic Author
Posts: 44
Joined: Fri Jun 10, 2011 8:42 am

Re: Openvpn + certificates not working

Tue Jan 24, 2012 2:45 pm

maara
As I know Mikrotik not support certificate based authentication.
Mikrotik RB1200 as VPN Solution
Thanks for info.... Thats sad because I hoped to use this feature instead of password authentification.... :(