On 09/11/2017 12:45 PM, André Borud wrote:
I'm trying to setup a vpn in the NetVM by importing .ovpn settings. The import
of settings is successful and adds the newly imported VPN to the list of
possible VPNs to connect to. But when clicking on one to connect I get a little
message saying its not possible to connect almost the same instance, like it
actually didn't try to connect.
These are the settings I'm trying to use:
client
dev tun
proto udp
remote ***-a05.*****.com 443
resolv-retry infinite
nobind
persist-key
persist-tun
persist-remote-ip
ca ca.******.com.crt
verify-x509-name ***-a05.*****.com name
auth-user-pass
comp-lzo
verb 3
auth SHA256
cipher AES-256-CBC
keysize 256
tls-cipher
TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-DSS-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA
and then I use a username and password.
Is there a way to see an error message or something atleast to fix whatever the
problem is?
Using QubesOS 3.2 on an Intel NUC i7.
If you're trying to import an ovpn file into Network Manager, its
error-prone and I've never gotten it to work. The other problem I see is
putting the VPN connection in netvm, when it should be in a proxyvm for
security.
The Qubes VPN doc provides two ways to setup a proxyvm for VPN: An easy
way using Network Manager, and a script-based method that uses
pre-existing ovpn files -- the latter has anti-leak protection:
https://www.qubes-os.org/doc/vpn/
I also have a project that uses the anti-leak features and is simpler to
install:
https://github.com/tasket/Qubes-vpn-support
--
Chris Laprise, [email protected]
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/e4d5c4c4-977a-db34-4c58-2c0404121615%40posteo.net.
For more options, visit https://groups.google.com/d/optout.
