Help please with OpenVPN client + certificates authorization

[avel9]

Hello. Came here to ask to solve my problem.
System: FreeBSD 9.2 x64, CentOS 6.5 x64, Ubuntu 14.04 x64 (tried all of them)
Client: Windows XP SP3 openvpn-install-2.3.4-I001-i686
SoftEther VPN Server 4.06 Build 9437

I am trying to authorise users without password, just by certificates(with OpenVPN client). Made CA certificate, installed to SoftEther, made certificate for client, added to .ovpn file and to softether. But when I try to connect always getting error:

Sun May 25 00:00:00 2014 us=15625 AUTH: Received control message: AUTH_FAILED
Sun May 25 00:00:00 2014 us=15625 TCP/UDP: Closing socket

Password auth works like a charm!

So maybe somebody figured that problem? Or how to make it work.

Logs:
http://pastebin.com/crgs6PVa
http://pastebin.com/n3qB06EH
http://pastebin.com/rXURRVqW

SE config http://pastebin.com/cFLYVub2
OVPN http://pastebin.com/AsY8H7tW

[avel9]

For people who has same problem:

Like said by Daiyuu Nobori on forum, SoftEther VPN server not compatible with certificate auth from OpenVPN client. Cert auth works only with SE VPN Client

Daiyuu Nobori, thank you for so great product! And asking you to make certificate auth with ovpn client asap :)

[dnobori]

We are considering to implement the certificate authenticaion on OpenVPN protocol in recent future.

[jbschooley]

Yes please, I'd really like to be able to have individual cert auth with OpenVPN too.

[bnjdg]

Isn't it available in your vpngate implementation? or is it because the vpngate server assumes a user vpn, as i can see vpngate openvpn certs have no user auth but only certs, I would like the same functionality on the SE VPN server, either no user auth and only certs or being able to give each user certs and authenticate them. Thanks!

[superpippo82xxx]

There are any update with this problem?

[eN-Joy]

@dnobori I am also interested in the most recent status of the feature. Thanks,

[m-emelchenkov]

Please let me know the state of the problem.

[ly2314]

Are there any update with this issue?

[alexsalex]

Is there any update on this issue?

Options error: You must define CA file (--ca) or CA path (--capath)
Use --help for more information.

[adminport]

#341

New maintainer needed

[er1z]

Any news on issue?

[vainkop]

Almost 4 years later & still no TLS auth support 👎

[fenice2]

@vainkop

If you think this is important then submit a pull request.

You could, on the other hand, wait until the changes in the development model for this project become more effective - give the developers a chance to clean-up the code and make some progress with the development of this project.

[davidebeatrici]

Pull request: #327

[moatazelmasry2]

PR #327 has been merged into the master branch. Happy compiling

[er1z]

When could we expect to have a binary install?

[agfasaud]

When could we expect to have a binary install?

[moatazelmasry2]

Hi guys, ideally we can create releases within travis-ci or appveyor. I'll try to either integrate the build binaries into one of the build tools, or just quickly create binaries and upload them. Cheers

[agfasaud]

Thanks, That's great

[agfasaud]

Hi, Any update on this.

Thanks

[agfasaud]

Hi Moataz, any update about the fixed release.
Regards

[davidebeatrici]

If you are on Windows, you can download the latest build from AppVeyor here: https://ci.appveyor.com/project/SoftEtherVPN/softethervpn/build/artifacts

[agfasaud]

Thank you so much , what about Linux version?

[davidebeatrici]

You can install the package from @paskal's PPA repository: https://launchpad.net/~paskal-07/+archive/ubuntu/softethervpn/+packages

[chipitsine]

What Linux distribution do you use?

[agfasaud]

RASPBIAN LINUX "Minimal image based on Debian Stretch" for Raspberry Pi

I was using this package from softether download: http://www.softether-download.com/files/softether/v4.27-9668-beta-2018.05.29-tree/Linux/SoftEther_VPN_Server/32bit_-_ARM_EABI/softether-vpnserver-v4.27-9668-beta-2018.05.29-linux-arm_eabi-32bit.tar.gz

[chipitsine]

4.27 is "stable" edition of SoftEtherVPN. question of "stable" edition should be asked here: https://www.softether.org/7-forum

[chipitsine]

developer edition currently is not shipped for raspberry. you can build it from source.

if you know how to build for raspberry, we need you:)

[fenice2]

Pointing someone the the SoftEther forums assumes they want to fight their way through the continuing spam that's posted on there. Nobody ever cleans it up and the content on there is a disgrace.

[chipitsine]

softether forum is an official place where 4.27 build is supported, if you know better place, please suggest

[ton18s]

Please support AUTH PAM in the next update. Thanks...