Hi, Selva Nair wrote: > Hi, > > I have a server running Debian wheezy with openvpn is 2.2.1 (stock > version of the distribution). > > When version 2.3 clients connect, the server log shows > > WARNING: 'keydir' is present in local config but missing in remote > config, local='keydir 1' > > What is this keydir option? I don't have it explicitly set in either > the server or any client configs so it appears to be a default. The > only reference to keydir in the man page is against the description of > --opt-verify which states 'keydir' as one of the options checked for > compatibility. It seems there no description of --keydir itself > anywhere in the manpage (not in 2.2.1, nor in 2.3.2). > > Any idea what this option does? On a related note, what is the > recommended way to upgrade to 2.3 on Debian wheezy? >
the warning is confusing, to say the least. Most likely your server config contains something like tls-auth ta.key 1 whereas your client config either does not contain such a line , or it contains tls-auth ta.key without any parameter. Read the man page on the 'tls-auth' option and you'll find that the second parameter can be 0 or 1 and that it specifies the key direction. If the server has the parameter set to 1, then all clients need to have that parameter set to 0, and vice versa. Of course, without your server and client config files it is impossible to tell exactly what is happening (yes you can take that as a hint ;)) HTH, JJK ------------------------------------------------------------------------------ Monitor 25 network devices or servers for free with OpManager! OpManager is web-based network management software that monitors network devices and physical & virtual servers, alerts via email & sms for fault. Monitor 25 devices for free with no restriction. Download now http://ad.doubleclick.net/ddm/clk/292181274;119417398;o _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
