[arm-allstar] OpenVPN issues

[David McGough]

Mike,

You can remove the "ignore-unknown-option block-outside-dns" and 
"block-outside-dns" options. They're not applicable to Linux (just MS 
Win).

The tls-crypt options for PFS are included in the hamvoip-openvpn 
package, which replaces the older 2.3.9 openvpn version.


73, David KB4FXC



On Sat, 5 Oct 2019, "Mike Sullivan via ARM-allstar" wrote:

> Trying to setup an OpenVPN on a mobile setup, I have one already deployed
> which works fine, but I'm missing something.. went with a simple install on
> an Ubuntu 19.04 VPN, downloaded the OVPN install scripts, which also
> auto-generates config files. When I go to start OVPN on my node (latest
> images, updates, etc) it's giving me two errors for "Unrecognized option or
> missing parameter(s) in client.conf", one being a "block-outside-dns"
> option and the other "tls-crypt (2.3.9)"
> 
> Here is what my config file looks like (omitted private info, of course)
> 
> client
> > dev tun
> > proto udp
> > remote ip.ip.ip.ip 1194
> > resolv-retry infinite
> > nobind
> > persist-key
> > persist-tun
> > remote-cert-tls server
> > auth SHA512
> > cipher AES-256-CBC
> > ignore-unknown-option block-outside-dns
> > block-outside-dns
> > verb 3
> > <ca>
> > -----BEGIN CERTIFICATE-----
> > key stuff
> > -----END CERTIFICATE-----
> > </ca>
> > <cert>
> > -----BEGIN CERTIFICATE-----
> > key stuff
> > -----END CERTIFICATE-----
> > </cert>
> > <key>
> > -----BEGIN PRIVATE KEY-----
> > key stuff
> > -----END PRIVATE KEY-----
> > </key>
> > <tls-crypt>
> > -----BEGIN OpenVPN Static key V1-----
> > key stuff
> > -----END OpenVPN Static key V1-----
> > </tls-crypt>
> >
> 
> Not sure what's going on.. any ideas?
> 
> Mike
> _______________________________________________
> 
> ARM-allstar mailing list
> ARM-allstar at hamvoip.org
> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
> 
> Visit the BBB and RPi2/3 web page - http://hamvoip.org
>