Hallo Allemaal,

Ik probeer een VPN verbinding tot stand te brengen met OpenVPN maar ik blijft hangen en krijg de volgende fout.

Mon Oct 19 15:13:37 2009 Restart pause, 2 second(s)
Mon Oct 19 15:13:39 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Oct 19 15:13:39 2009 Re-using SSL/TLS context
Mon Oct 19 15:13:39 2009 LZO compression initialized
Mon Oct 19 15:13:39 2009 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Oct 19 15:13:39 2009 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Oct 19 15:13:39 2009 Local Options hash (VER=V4): '41690919'
Mon Oct 19 15:13:39 2009 Expected Remote Options hash (VER=V4): '530fdded'
Mon Oct 19 15:13:39 2009 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Oct 19 15:13:39 2009 UDPv4 link local: [undef]
Mon Oct 19 15:13:39 2009 UDPv4 link remote: 83.86.***.**:1194
Mon Oct 19 15:13:39 2009 TLS: Initial packet from 83.86.***.**::1194, sid=081b4be8 1bf8115d
Mon Oct 19 15:13:40 2009 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: /C=NL/ST=ZH/L=leiden/O=OpenVPN/OU=IT/CN=richard-dta/emailAddress=***@***.nl

Zoals je ziet is er een verbinding maar het gaat fout bij het certificaat.

Iemand tips?

Alvast bedankt :)
Aanvullend bericht:

Code:

Microsoft Windows [versie 6.0.6001]
Copyright (c) 2006 Microsoft Corporation. Alle rechten voorbehouden.

C:\Users\Erold>cd C:\Program Files\OpenVPN\easy-rsa

C:\Program Files\OpenVPN\easy-rsa>init-config

C:\Program Files\OpenVPN\easy-rsa>copy vars.bat.sample vars.bat
        1 bestand(en) gekopieerd.

C:\Program Files\OpenVPN\easy-rsa>copy openssl.cnf.sample openssl.cnf
        1 bestand(en) gekopieerd.

C:\Program Files\OpenVPN\easy-rsa>vars

C:\Program Files\OpenVPN\easy-rsa>clean-all
        1 bestand(en) gekopieerd.
        1 bestand(en) gekopieerd.

C:\Program Files\OpenVPN\easy-rsa>build-ca
Loading 'screen' into random state - done
Generating a 1024 bit RSA private key
........++++++
.............++++++
writing new private key to 'keys\ca.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [US]:NL
State or Province Name (full name) [CA]:ZH
Locality Name (eg, city) [SanFrancisco]:Leiden
Organization Name (eg, company) [OpenVPN]:OpenVPN
Organizational Unit Name (eg, section) []:IT
Common Name (eg, your name or your server's hostname) []:Laptop_Erold
Email Address [mail@host.domain]:***@***.nl

C:\Program Files\OpenVPN\easy-rsa>build-key Laptop_Erold
Loading 'screen' into random state - done
Generating a 1024 bit RSA private key
.++++++
.........++++++
writing new private key to 'keys\Laptop_Erold.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [US]:NL
State or Province Name (full name) [CA]:ZH
Locality Name (eg, city) [SanFrancisco]:Leiden
Organization Name (eg, company) [OpenVPN]:OpenVPN
Organizational Unit Name (eg, section) []:'IT
Common Name (eg, your name or your server's hostname) []:Laptop_Erold
Email Address [mail@host.domain]:***@***.nl

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:*********
An optional company name []:
Using configuration from openssl.cnf
Loading 'screen' into random state - done
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
countryName           :PRINTABLE:'NL'
stateOrProvinceName   :PRINTABLE:'ZH'
localityName          :PRINTABLE:'Leiden'
organizationName      :PRINTABLE:'OpenVPN'
organizationalUnitName:PRINTABLE:''IT'
commonName            :T61STRING:'Laptop_Erold'
emailAddress          :IA5STRING:'***@***.nl'
Certificate is to be certified until Oct 18 07:27:47 2019 GMT (3650 days)
Sign the certificate? [y/n]:y


1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated
C:\Program Files\OpenVPN\easy-rsa>vars

C:\Program Files\OpenVPN\easy-rsa>revoke-full Laptop_Erold
Using configuration from openssl.cnf
Loading 'screen' into random state - done
Revoking Certificate 01.
Data Base Updated
Using configuration from openssl.cnf
Loading 'screen' into random state - done
keys\ca.crt
keys\crl.pem
        1 bestand(en) gekopieerd.
keys\Laptop_Erold.crt: /C=NL/ST=ZH/O=OpenVPN/OU='IT/CN=Laptop_Erold/emailAddress
=***@***.nl
error 23 at 0 depth lookup:certificate revoked

C:\Program Files\OpenVPN\easy-rsa>

je hebt een CA, een key-server en een key-client. Je doet de build-ca en de build-key maar ik mis de build-key-server... kan dat hem zijn?