Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable

2017-09-12 Thread Lonnie Abelbeck
On Sep 12, 2017, at 5:13 AM, Michael Keuter wrote: > BTW: Instead of disabling a client in the WebGUI, you could also delete the > appropriate key files in "/mnt/kd/openvpn/webinterface/keys/" > in case you don't need them anymore. No Michael, that does not work. The OpenVPN server does not

Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable

2017-09-12 Thread Michael Keuter
nux List > Date: Tuesday, 12 September 2017 at 8:04 am > To: AstLinux List > Subject: Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable > > Michael, > > I quickly checked, it would be somewhat of a hack to call 'gen-rc-conf' at > the appropriate swee

Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable

2017-09-11 Thread Michael Knill
, 12 September 2017 at 8:04 am To: AstLinux List Subject: Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable Michael, I quickly checked, it would be somewhat of a hack to call 'gen-rc-conf' at the appropriate sweet-spot. And it would not always work, a restart of OpenVP

Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable

2017-09-11 Thread Lonnie Abelbeck
n openvpn.php > > Regards > Michael Knill > > -Original Message- > From: Michael Knill > Reply-To: AstLinux List > Date: Tuesday, 12 September 2017 at 7:47 am > To: AstLinux List > Subject: Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable > &g

Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable

2017-09-11 Thread Michael Knill
Sorry when I say script I mean openvpn.php Regards Michael Knill -Original Message- From: Michael Knill Reply-To: AstLinux List Date: Tuesday, 12 September 2017 at 7:47 am To: AstLinux List Subject: Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable Hi Lonnie Could we

Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable

2017-09-11 Thread Michael Knill
one. > > Regards > Michael Knill > > -Original Message- > From: Lonnie Abelbeck > Reply-To: AstLinux List > Date: Monday, 11 September 2017 at 11:16 pm > To: AstLinux List > Subject: Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable > > Mi

Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable

2017-09-11 Thread Lonnie Abelbeck
age- > From: Lonnie Abelbeck > Reply-To: AstLinux List > Date: Monday, 11 September 2017 at 11:16 pm > To: AstLinux List > Subject: Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable > > Michael, > > If you have OpenVPN Server -> Client Certifica

Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable

2017-09-11 Thread Michael Knill
m: Lonnie Abelbeck > Reply-To: AstLinux List > Date: Monday, 11 September 2017 at 1:24 pm > To: AstLinux List > Subject: Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable > > Michael, > > You could try > -- OpenVPN Server -- > Raw Commands: dupli

Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable

2017-09-11 Thread Lonnie Abelbeck
ck > Reply-To: AstLinux List > Date: Monday, 11 September 2017 at 1:24 pm > To: AstLinux List > Subject: Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable > > Michael, > > You could try > -- OpenVPN Server -- > Raw Commands: duplicate-cn > --

Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable

2017-09-10 Thread Michael Knill
: Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable Michael, You could try -- OpenVPN Server -- Raw Commands: duplicate-cn -- and see if that helps. But you need to understand if you really need "multiple clients using the same certificate or username to concurrently connect&

Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable

2017-09-10 Thread Lonnie Abelbeck
(and VPN establishes) when I restart the OpenVPN >> server. >> Can you think why this could be happening? >> >> Regards >> Michael Knill >> >> -Original Message- >> From: Lonnie Abelbeck >> Reply-To: AstLinux List >> Date: Monday,

Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable

2017-09-10 Thread Michael Knill
: AstLinux List Subject: Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable Michael, Judging from your error log the Yealink's client CN (Common Name) did not match any of the allowed (non-checked) Clients in the server. As long as you are certain the Yealink client cert is goo

Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable

2017-09-10 Thread Lonnie Abelbeck
nd VPN establishes) when I restart the OpenVPN > server. > Can you think why this could be happening? > > Regards > Michael Knill > > -Original Message- > From: Lonnie Abelbeck > Reply-To: AstLinux List > Date: Monday, 11 September 2017 at 9:55 am > T

Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable

2017-09-10 Thread Michael Knill
why this could be happening? Regards Michael Knill -Original Message- From: Lonnie Abelbeck Reply-To: AstLinux List Date: Monday, 11 September 2017 at 9:55 am To: AstLinux List Subject: Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable Michael, On your OpenVPN Server

Re: [Astlinux-users] OpenVPN on Yealink phones not very reliable

2017-09-10 Thread Lonnie Abelbeck
Michael, On your OpenVPN Server configuration (at the bottom), you must have at least one CommonName disabled. Client Certificates and Keys: -> Disabled checked(correct ?) This will define the variable OVPN_VALIDCLIENTS and is checked with the /usr/sbin/openvpn-tls-verify script Is your