Could not start OpenVPN (openvpnstart returned with status #251)

[bernd....@gmail.com]

Hi,

I am trying to connect to my OpenVPN server.

Hi,

I am trying to connect to my OpenVPN server. 

My openvpn.ovpn file is:

client

dev tap0

proto tcp

remote  xxxx.yyyy.net  443

resolv-retry infinite

nobind

persist-key

persist-tun

ca ca.crt

tls-auth ta.key 1

cipher AES-128-CBC

comp-lzo

verb 3

The openvpn.log complains:

Options error: No client-side authentication method is specified.  You must use either --cert/--key, --pkcs12, or --auth-user-pass

Use --help for more information.

The files in my xxx.tblk directory are:

ca.crt        openvpn.ovpn  ta.key

Could anybody give me some hints on what I am missing?

Thank you very much,

-- Bernd

[jkbull...gmail.com]

If nobody else responds, this is an OpenVPN question, not a Tunnelblick question. You probably will find more help from one of the OpenVPN resources:

• OpenVPN FAQ
• OpenVPN HOWTO
• OpenVPN 2.3 Man Page
• OpenVPN Documentation
• OpenVPN Users Forum
• OpenVPN Users Mailing List

[Randy Witlicki]

  Hello,

  I believe (but I might be wrong) that the tls-auth directive is to add an additional layer of sercurity.  You still need a "key" line in your configuration.  See:

  http://openvpn.net/index.php/open-source/documentation/manuals/65-openvpn-20x-manpage.html

  Perhaps change the line  tls-auth ta.key 1  to key ta.key and retry.

  Randy

--
You received this message because you are subscribed to the Google Groups "tunnelblick-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tunnelblick-dis...@googlegroups.com.
Visit this group at http://groups.google.com/group/tunnelblick-discuss.
For more options, visit https://groups.google.com/d/optout.

[Bernd Prager]

Thank you for your help. I got confused by an earlier post which stated that 'auth-user-pass' is not supported and took it out. I just had to reintroduce that in my .ovpn file and everything went fine. Thanks again!