Re: [Openvpn-users] push client network to server

2015-05-21 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 21/05/15 14:25, Josu Lazkano wrote: 2015-05-20 23:49 GMT+02:00 David Sommerseth openvpn.l...@topphemmelig.net: [...snip...] I'll admit I haven't paid attention to all details in this discussion. Static encrypted VPN tunnels can work very

Re: [Openvpn-users] push client network to server

2015-05-21 Thread Josu Lazkano
2015-05-20 23:49 GMT+02:00 David Sommerseth openvpn.l...@topphemmelig.net: On 20 May 2015 14:34:22 CEST, Josu Lazkano josu.lazk...@gmail.com wrote: Thanks Mathias! Your configuration works perfect. I can ping to any host in any network. That is great. Thank you very much for your help. Now I

Re: [Openvpn-users] push client network to server

2015-05-21 Thread Gert Doering
Hi, On Thu, May 21, 2015 at 02:37:36PM +0200, David Sommerseth wrote: It's not that easy, unfortunately. And you've already been down that path once already. To switch to TLS mode, you need to use --ca, --cert and --key. In addition on the server side you need --dh as well. This means

Re: [Openvpn-users] Logjam: new tls/dh attack

2015-05-21 Thread Gert Doering
Hi, On Thu, May 21, 2015 at 03:58:05PM +0200, Jan Just Keijser wrote: On 21/05/15 15:11, Kapetanakis Giannis wrote: Just a heads up on this new attack https://weakdh.org/ the short gist of this attack is: upgrade your DH param file to 2048 bits or more otherwise you're vulnerable :)

Re: [Openvpn-users] Logjam: new tls/dh attack

2015-05-21 Thread Jan Just Keijser
Hi, On 21/05/15 15:11, Kapetanakis Giannis wrote: Hi, Just a heads up on this new attack https://weakdh.org/ the short gist of this attack is: upgrade your DH param file to 2048 bits or more otherwise you're vulnerable :) JJK

[Openvpn-users] Logjam: new tls/dh attack

2015-05-21 Thread Kapetanakis Giannis
Hi, Just a heads up on this new attack https://weakdh.org/ G -- One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance

Re: [Openvpn-users] push client network to server

2015-05-21 Thread Steffan Karger
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 21-05-15 14:45, Gert Doering wrote: On Thu, May 21, 2015 at 02:37:36PM +0200, David Sommerseth wrote: It's not that easy, unfortunately. And you've already been down that path once already. To switch to TLS mode, you need to use --ca,

Re: [Openvpn-users] has anyone got the Chromebook openvpn client working?

2015-05-21 Thread Jason Haar
Slight update. I just had the same problem on Android with the OpenVPN for Android app, but as it's basically the pure client it was easier to diagnose the issue. This is a UDP profile and the server has fragment 1400 - so the client has to have that too. Once I put that onto the Android, it

[Openvpn-users] has anyone got the Chromebook openvpn client working?

2015-05-21 Thread Jason Haar
Hi there We've got a working openvpn server successfully supporting Linux/Windows/Mac clients. I just tried to get the native Chromebook client working via the .ONC file config support (have to due to tls-auth/etc) and didn't have much luck. It successfully connects and gets an IP, but