[Openvpn-users] Help with OpenVPN & DD-WRT

["Preston Edwards" <preston.edwards@xxxxxxxxx>]

I'm trying to set up a OpenVPN server on my Linksys WRT54GL running DD-WRT. I'd like for multiple (well, really only 3) clients to be able to connect via VPN, so I followed the relevant instructions on the DD-WRT wiki page as well as the OpenVPN documentation.

I have followed the instructions exactly, and have tried to re-do the setup multiple times, but I still seem to have the same problem. When trying to connect, I get the "certificate is not yet valid" error when looking through the DD-WRT logs. Here is the exact error(s):

Aug  6 22:27:58 DD-WRT daemon.err openvpn[224]: 192.168.20.130:4995 VERIFY ERROR: depth=1, error=certificate is not yet valid: /C=US/ST=Texas/L=San_Antonio/O=YouthCUE/OU=Information_Technology/CN=OpenVPN-CA/emailAddress=ssladmin@xxxxxxxxxxxx
Aug  6 22:27:58 DD-WRT daemon.err openvpn[224]: 192.168.20.130:4995 TLS_ERROR: BIO read tls_read_plaintext error: error:140890B2:lib(20):func(137):reason(178)
Aug  6 22:27:58 DD-WRT daemon.err openvpn[224]: 192.168.20.130:4995 TLS Error: TLS object -> incoming plaintext read error
Aug  6 22:27:58 DD-WRT daemon.err openvpn[224]: 192.168.20.130:4995 TLS Error: TLS handshake failed
Aug  6 22:27:58 DD-WRT daemon.err openvpn[224]: 192.168.20.130:4995 Fatal TLS error (check_tls_errors_co), restarting

It seems to be failing on the CA certificate. Note that the connecting IP is local, however it doesn't seem to affect the error if I connect from outside my network or not...same error.

 

Basically what I'm doing is as follows:

 

1.) Downloaded OpenVPN for Windows to create my CA & certificates.

2.) Created CA, server cert, client certs, and DH key.

3.) Loaded those onto the platform.

4.) Configured DD-WRT to run OpenVPN.

I'm currently running the VPN version of DD-WRT v23 SP2 (08/04/06), but have tried several versions of DD-WRT, including the one suggested by the wiki.

My clocks are synchronized using NTP, yet I can't get past that error.

Any ideas? Thanks in advance.

 

--Preston

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV

_______________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users