Newsgroup: it.comp.os.linux.debian
Titolo: help openvpn

mi chiedono di metterei in piedi una vpn. 
con openvpn sono riuscita a fare la vpn punto a punto , tra un server 
fedora core 8 ed un client xp .
mi occorre una vpn punto -----> molti clients . il servers sempre fedora 9
ed i clients sempre xp . ho provato queste configurazioni , ma non riesco 
a instaurare la connessione. 
le configurazioni le ho prese dal sito di openvpn.
grazie
++++++++++++
server.conf
++++++++++++
port 1194
proto udp
dev tap
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
max-clients 20
persist-key
persist-tun
status openvpn-status.log
verb 4
------------------------------------
++++++++++
client.conf
++++++++++
client
dev tap
proto udp
remote 192.168.1.104 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
dh dh1024.pem
comp-lzo
verb 3
--------------------------------------
log ottenuto sul client windows
AF:3/1 ]
Mon Feb 02 08:12:01 2009 Local Options hash (VER=V4): 'd79ca330'
Mon Feb 02 08:12:01 2009 Expected Remote Options hash (VER=V4): 'f7df56b8'
Mon Feb 02 08:12:01 2009 UDPv4 link local: [undef]
Mon Feb 02 08:12:01 2009 UDPv4 link remote: 
192.168.1.104:1194
 
Mon Feb 02 08:12:01 2009 TLS: Initial packet from 
192.168.1.104:1194
, 
sid=925cb72e 2e05fd7e
Mon Feb 02 08:12:01 2009 VERIFY ERROR: depth=0, error=unsupported 
certificate purpose: /C=IT/ST=AT/L=ASTI/O=STUDIO/CN=server/
emailAddress=
stu...@studio.it
 
Mon Feb 02 08:12:01 2009 TLS_ERROR: BIO read tls_read_plaintext error: 
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate 
verify failed
Mon Feb 02 08:12:01 2009 TLS Error: TLS object -> incoming plaintext read 
error
Mon Feb 02 08:12:01 2009 TLS Error: TLS handshake failed
Mon Feb 02 08:12:01 2009 TCP/UDP: Closing socket
Mon Feb 02 08:12:01 2009 SIGUSR1[soft,tls-error] received, process 
restarting
Mon Feb 02 08:12:01 2009 Restart pause, 2 second(s)
Mon Feb 02 08:12:03 2009 IMPORTANT: OpenVPN's default port number is now 
1194, based on an official port number assignment by IANA.  OpenVPN 2.0-
beta16 and earlier used 5000 as the default port.
Mon Feb 02 08:12:03 2009 WARNING: No server certificate verification 
method has been enabled.  See 
http://openvpn.net/howto.html#mitm
 for more 
info.
Mon Feb 02 08:12:03 2009 Re-using SSL/TLS context
Mon Feb 02 08:12:03 2009 LZO compression initialized
Mon Feb 02 08:12:03 2009 Control Channel MTU parms [ L:1574 D:138 EF:38 
EB:0 ET:0 EL:0 ]
Mon Feb 02 08:12:03 2009 Data Channel MTU parms [ L:1574 D:1450 EF:42 
EB:135 ET:32 EL:0 AF:3/1 ]
Mon Feb 02 08:12:03 2009 Local Options hash (VER=V4): 'd79ca330'
Mon Feb 02 08:12:03 2009 Expected Remote Options hash (VER=V4): 'f7df56b8'
Mon Feb 02 08:12:03 2009 UDPv4 link local: [undef]
Mon Feb 02 08:12:03 2009 UDPv4 link remote: 
192.168.1.104:1194
 
Mon Feb 02 08:12:03 2009 TCP/UDP: Closing socket
Mon Feb 02 08:12:03 2009 SIGTERM[hard,] received, process exiting

 verb 3
conviene anche mettere una chiave anti Dos
sulk server:
tls-auth /etc/ssl/CA/ta.key 0 # This file is secret
sul client
tls-auth ta.key 1