View original (French)

OpenVPN client on Windows 10 for Freebox Delta OpenVPN server

LJFHA Posted messages 9 Status Member -  
brupala Posted messages 111138 Registration date   Status Member Last intervention   -
Hello,
I set up OpenVPN for Android, it's working well both on Wi-Fi and 4G, splendid..
But OpenVPN on Windows doesn't work.
Here is the error:
"there is a problem in your selection of --if config endpoints. the local and remote vpn endpoints must exist within the same 255.255.255.252 subnet. this is a limitation of dev tun when used with the TAP-WIN32 driver).
Can someone tell me how to configure it to resolve this issue?

4 answers

  1.
    brupala Posted messages 111138 Registration date   Status Member Last intervention   14 440
     
    Hi,
    Show me the client's config ....

    --
    and ... There you go!
    0
  2. LJFHA Posted messages 9 Status Member
     
    thank you, here is the copy,
    client
    remote 82....... 27958
    proto udp
    nobind
    dev-type tun
    tun-ipv6
    pull
    dev tun0
    redirect-gateway
    auth-user-pass
    auth-retry interact
    mssfix 1452
    explicit-exit-notify 3
    cipher AES-256-CBC
    remote-cert-tls server
    verify-x509-name "C=FR, O=Freebox SA, CN=Freebox OpenVPN server b27ae4cc738fd70d45308f961fb496ed"
    # use tls-remote instead of verify-x509-name for deprecated openssl
    # tls-remote "/C=FR/O=Freebox_SA/CN=Freebox_OpenVPN_server_b27ae4cc738fd70d45308f961fb496ed"
    <ca>
    </ca>
    <cert>
    </cert>
    <extra-certs>

    </extra-certs>
    <key>
    -
    </key>
    0
    1. brupala Posted messages 111138 Registration date   Status Member Last intervention   14 440
       
      OK,
      well, I cleaned up to remove all your displayed keys as well as your public IP address.
      So, there's nothing particular left in terms of IP configuration for the tunnel: It's the server that takes care of everything.
      Try uninstalling OpenVPN as well as tapturn32 and reinstall a version that works well with your Windows.
      Is your Windows 64-bit or 32-bit?
      0
  3. LJFHA Posted messages 9 Status Member
     
    my operating system is 64-bit, Windows 10 Home.
    okay for uninstalling and reinstalling OpenVPN, for taptun32 I don't know.
    0
  4. LJFHA Posted messages 9 Status Member
     
    Hello, thank you for deleting the keys..
    I tried again, taking the corrections into account, of course, with the remote address reset.
    Same error message.
    openvpn 2.4.6-I602
    I will restart with openvpn-install-2.4.6 I601.exe (64 bits)
    0
    1. brupala Posted messages 111138 Registration date   Status Member Last intervention   14 440
       
      check that the installation removes the tun/tap driver.
      maybe by uninstalling openvpn first, check that tun/tap is no longer there perhaps with a netsh interface ip show interface
      otherwise, remove it manually from the list of network interfaces.
      0
    2. LJFHA Posted messages 9 Status Member > brupala Posted messages 111138 Registration date   Status Member Last intervention  
       
      Test completed:
      openvpn 2.4.6_I1601
      log file:
      Thu Sep 24 16:52:32 2020 Note: option tun-ipv6 is ignored because modern operating systems do not need special IPv6 tun handling anymore.
      Thu Sep 24 16:52:32 2020 OpenVPN 2.4.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 24 2018
      Thu Sep 24 16:52:32 2020 Windows version 6.2 (Windows 8 or greater) 64bit
      Thu Sep 24 16:52:32 2020 library versions: OpenSSL 1.1.0h 27 Mar 2018, LZO 2.10
      Enter Management Password:
      Thu Sep 24 16:52:38 2020 OpenSSL: error:0906D06C:PEM routines:PEM_read_bio:no start line
      Thu Sep 24 16:52:38 2020 OpenSSL: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib
      Thu Sep 24 16:52:38 2020 Cannot load inline certificate file
      Thu Sep 24 16:52:38 2020 Exiting due to fatal error

      Configuration file related to my user:
      client
      remote 82...27958
      proto udp
      nobind
      dev-type tun
      tun-ipv6
      pull
      dev tun0
      redirect-gateway
      auth-user-pass
      auth-retry interact
      mssfix 1452
      explicit-exit-notify 3
      cipher AES-256-CBC
      remote-cert-tls server
      verify-x509-name "C=FR, O=Freebox SA, CN=Freebox OpenVPN server b27ae4cc738fd70d45308f961fb496ed"
      # use tls-remote instead of verify-x509-name for deprecated openssl
      # tls-remote "/C=FR/O=Freebox_SA/CN=Freebox_OpenVPN_server_b27ae4cc738fd70d45308f961fb496ed"
      <ca>
      </ca>
      <cert>
      </cert>
      <extra-certs>
      </extra-certs>
      <key>
      </key>
      0
    3. brupala Posted messages 111138 Registration date   Status Member Last intervention   14 440 > LJFHA Posted messages 9 Status Member
       
      I had removed the certificates from your forum post, but you shouldn't have removed them from your config file, or else put them in separate files,
      put back your original ovpn file...
      0
    4. LJFHA Posted messages 9 Status Member > brupala Posted messages 111138 Registration date   Status Member Last intervention  
       
      ok, I'm redoing it, I'm removing tun / tap
      here's the log,
      Thu Sep 24 18:43:04 2020 Note: option tun-ipv6 is ignored because modern operating systems do not need special IPv6 tun handling anymore.
      Thu Sep 24 18:43:04 2020 OpenVPN 2.4.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 24 2018
      Thu Sep 24 18:43:04 2020 Windows version 6.2 (Windows 8 or greater) 64bit
      Thu Sep 24 18:43:04 2020 library versions: OpenSSL 1.1.0h 27 Mar 2018, LZO 2.10
      Enter Management Password:
      Thu Sep 24 18:43:09 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]82.64.224.91:27958
      Thu Sep 24 18:43:09 2020 UDP link local: (not bound)
      Thu Sep 24 18:43:09 2020 UDP link remote: [AF_INET]82.64.224.91:27958
      Thu Sep 24 18:43:10 2020 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
      Thu Sep 24 18:43:10 2020 [Freebox OpenVPN server b27ae4cc738fd70d45308f961fb496ed] Peer Connection Initiated with [AF_INET]82.64.224.91:27958
      Thu Sep 24 18:43:11 2020 open_tun
      Thu Sep 24 18:43:11 2020 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{CB6077A6-1A5C-4971-BBEF-670F5ADC7086}.tap
      Thu Sep 24 18:43:11 2020 ERROR: --dev tun also requires --ifconfig
      Thu Sep 24 18:43:11 2020 Exiting due to fatal error
      0
    5. brupala Posted messages 111138 Registration date   Status Member Last intervention   14 440 > LJFHA Posted messages 9 Status Member
       
      Reinstall OpenVPN if you removed tun/tap after installing it.
      0