Hi Lonnie

Do you mean Client Name? Yes I do have one disabled if so but it is not the one 
I was having problems with.

After testing I can now confirm that this issue occurs when I configure up a 
new phone and it goes away (and VPN establishes) when I restart the OpenVPN 
server.
Can you think why this could be happening?

Regards
Michael Knill

-----Original Message-----
From: Lonnie Abelbeck <li...@lonnie.abelbeck.com>
Reply-To: AstLinux List <astlinux-users@lists.sourceforge.net>
Date: Monday, 11 September 2017 at 9:55 am
To: AstLinux List <astlinux-users@lists.sourceforge.net>
Subject: Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable

Michael,

On your OpenVPN Server configuration (at the bottom), you must have at least 
one CommonName disabled. 

Client Certificates and Keys: -> Disabled checked    (correct ?)

This will define the variable OVPN_VALIDCLIENTS and is checked with the 
/usr/sbin/openvpn-tls-verify script

Is your Yealink using one of the "Disabled" CommonNames ?

Lonnie


On Sep 10, 2017, at 6:34 PM, Michael Knill <michael.kn...@ipcsolutions.com.au> 
wrote:

> I am having some issues with setting up OpenVPN on my Yealink phones. It used 
> to be easy to set up but now it's a bit flakey.
> Once its up it seems to be fine but getting it to that stage is an issue.
>  
> I noticed that I am getting these in the logs:
> Mon Sep 11 08:05:39 2017 us=888912 115.187.181.61:36531 WARNING: Failed 
> running command (--tls-verify script): external program exited with error 
> status: 1
>  
> Im not sure what they mean? What could the problem be?
>  
> Regards
> Michael Knill
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! 
> http://sdm.link/slashdot_______________________________________________
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Reply via email to