COMPGROUPS.NET | Search | Post Question | Groups | Stream | About | Register

### OpenVPN and Token USB ( long )

• Email
• Follow

Hello,

I must do Openvpn copnnection with etoken and I'm a newbee on etokens...=20
In fact it's my first time I use this hardware.

I work on Centos 5.4
I use Aladdin eToken NG-FLASH and I have installed rpm for libraries and=20

I have setup eToken with password protection and I have installed=20
OpenVPN 2.1.1 ( see below )

[root@centos ~]# openvpn --version
OpenVPN 2.1.1 i386-redhat-linux [SSL] [LZO2] [EPOLL] [PKCS11] built on=20
Jan 11 2010
Originally developed by James Yonan
Copyright (C) 2002-2009 OpenVPN Technologies, Inc. <sales@openvpn.net>

When I try command "openvpn --show-pkcs11-ids /usr/lib/libeTPkcs11.so" I=20
have this message :

The following objects are available for use.
Each object shown below may be used as parameter to
--pkcs11-id option please remember to use single quote mark.

Certificate
DN:             /C=3DFR/ST=3DMidi=20
er.fr
Serial:         02
\x2E/eToken/003d2771/eToken3/43313733414334453844363944383436

So openvpn can list token certificates...

In my VPNclient.conf I have these lines :

ca ca.crt
# Works fine with files on openvpn directory
#cert client1.crt
#key client1.key

pkcs11-providers "/usr/lib/libeTPkcs11.so"
# First test
\\x2E/eToken/003d2771/eToken3/43313733414334453844363944383436"

When I try to start Openvpn connection I see these messages in logs.

[root@centos ~]# /etc/init.d/openvpn start
D=C3=A9marrage de openvpn :                                    [  OK  ]
[root@centos ~]# tail /var/log/messages
Jan 12 13:16:53 centos openvpn[8040]: VERIFY OK: depth=3D1,=20
/C=3DFR/ST=3DMidi_Pyrenees/L=3DToulouse/O=3DCAPLASER/OU=3DService_Informati=
que/CN=3D
Jan 12 13:16:53 centos openvpn[8040]: VERIFY OK: nsCertType=3DSERVER
Jan 12 13:16:53 centos openvpn[8040]: VERIFY OK: depth=3D0,=20
/C=3DFR/ST=3DMidi_Pyrenees/L=3DToulouse/O=3DCAPLASER/CN=3Dopenvpn.caplaser.=
fr/emai
Jan 12 13:16:53 centos openvpn[8040]: PKCS#11: Cannot perform signature=20
1:'CKR_CANCEL'
Jan 12 13:16:53 centos openvpn[8040]: TLS_ERROR: BIO read=20
_SEND_CLIENT_VERIFY:RSA lib
Jan 12 13:16:53 centos openvpn[8040]: TLS Error: TLS object -> incoming=20
Jan 12 13:16:53 centos openvpn[8040]: TLS Error: TLS handshake failed
Jan 12 13:16:53 centos openvpn[8040]: TCP/UDP: Closing socket
Jan 12 13:16:53 centos openvpn[8040]: SIGUSR1[soft,tls-error] received,=20
process restarting
Jan 12 13:16:53 centos openvpn[8040]: Restart pause, 2 second(s)

I can't send password to read etoken, so it can be a reason, but I can't=20
understand how I can do that :-(

Regards

Laurent

 0

See related articles to this posting

In article <MPG.25b67943896039f7989680@news.free.fr>,
l.rayssiguier@free.fr says...
> [root@centos ~]# /etc/init.d/openvpn start
I have found that if I launch directly command openvpn --config
/etc/openvpn/VPNclient.conf, the password is required and tunnel is
coming up when I give the right password.

The problem is the script which "deamonize" process and password can't

Have you some hint to ask it even if I use openvpn script ?

 0

Every body knows that our life seems to be not cheap, nevertheless some people require money for various stuff and not every person gets enough cash. Hence to receive quick <a href="http://bestfinance-blog.com">loans</a> and just auto loan should be a proper solution.


 0
Reply user137 (66) 1/8/2011 2:47:34 PM

Every body knows that our life seems to be not cheap, nevertheless some people require money for various stuff and not every person gets enough cash. Hence to receive quick <a href="http://bestfinance-blog.com">loans</a> and just auto loan should be a proper solution.
 0

3 Replies
1852 Views

Similar Articles

12/8/2013 10:30:29 AM
[PageSpeed]

Similar Artilces:

\not not long enough
I would like to "cross out" some numbers in an array. Using \not before a single character works well enough. However, I would like to also cross out two- and three-digit numbers. (It seems to me that I need something like \widehat but for \not. ?\widenot?) Any suggestions? Thanks, Barry Barry Tesman wrote: > I would like to "cross out" some numbers in an array. Using \not > before a single character works well enough. However, I would like > to also cross out two- and three-digit numbers. (It seems to me > that I need something like \widehat but for

What a long...
....strange trip it's been. <http://www.macmothership.com/gallery/gallery1.html> -- "The iPhone doesn't have a speaker phone" -- "I checked very carefully" -- "I checked Apple's web pages" -- Edwin on the iPhone "It is Mac OS X, not BSD.' -- 'From Mac OS to BSD Unix." -- "It's BSD Unix with Apple's APIs and GUI on top of it' -- 'nothing but BSD Unix' (Edwin on Mac OS X) '[The IBM PC] could boot multiple OS, such as DOS, C/PM, GEM, etc.' -- 'I claimed nothing about GEM other than it was

How to unpack long long ? 302899
How do i unpack "long long" int type ( 8 bytes ) ? this unpack("l8",$var) returns spaces . but unpack("l4,substr($var,4)) returns the correct value . Thanks Golan

alias line too long
Hi I need to setup a large alias but I get the message =09 /etc/aliases: line 194: alias line too long Any hint wellcome thank you very much Gilles --=20 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ tel +41 21 693 26 33 mobile +41 79 513 74 10 fax +41 21 693 76 00 www http://ltswww.epfl.ch/~auric GILLES AURIC EPFL Facult=E9 STI-ITS CH-1015 LAUSANNE SUISSE ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Gilles Auric wrote: > Hi > I need to setup a large alias but I get the message > > /etc/aliases: line 194: alias line too long > > Any hint wellcome You can span entries over multiple lines. man aliases: Lines beginning with white space are continuation lines. Another way to continue lines is by placing a backslash directly before a newline. Lines beginning with # are comments. -- Marco Senft TTG - Technische Treuhand GmbH http://www.t2g.ch/

how to indent a long statement?
Hi, Would you please let me know how to handle a long statement? With other programming languages, we can indent a long statement to make it more readable and better print out. I'd like to know how to do this with Matlab. Please give me some advice about this. I appreciate your help very much in advance and hope to hear from any of you soon. Thanks. eg)I test this but it didn't work fprintf(fcc, '1234567890',_ '1234567890',_ '1234567890',_ '1234567890'); Hello: Look at this code, may be could helps you: %%%%%%%%%%%%% % Long Text generation with user data %%%%%%%%%%%%%% Texto = sprintf('evento=%d; actualizaInterfaz;', contEventos); contEventos = contEventos+1; %%%%%%%%% %% For a huge set of properties %%%%%%%% graf(fila) = uicontrol('Style','Checkbox',... 'Units','normalized', ... 'Position',pos, ... 'String',char(titulos(fila,1)),... 'FontWeight','bold',... 'FontAngle','italic',... 'Background',[.7 .7 .7],... 'Foreground',[0 0 0],... '

String to long integer strtol
I tried to convert a string to long integer using the following code but it is not working. I tried with strtolI and strtod. I think the input exceeds long integer range. What function shall i use in c to accomplish this ? Please help me. void main() { char a[20]="4051592851"; long int i; double d; i = strtoll(a,NULL,10); printf("%ld\n",i); d = strtod(a,NULL,10); printf("%lf\n",d); } O/p -243374445 -765460480.000000 "knight" <vimal3271@gmail.com> wrote in message news:0de5da9f-9b92-47ca-b6c0-5bdce1a03316@n32g2000pre.googlegroups.com=20 > I tried to convert a string to long integer using the following code > but it is not working. I tried with strtolI and strtod. I think the > input exceeds long integer range. What function shall i use in c to You ask a C question in a C++ group. Why? > accomplish this ? Please help me. >=20 >=20 > void main() > { > char a[20]=3D"4051592851"; > long int i; > double d; > i =3D strtoll(a,NULL,10); > printf("%ld\n",i); > d =3D strtod(a,NULL,10); > printf("%lf\n",d); > } My C compiler has the following diagnostics: i

Reinterpret the bits of a float as unsigned long
For a hash function I want to reinterpret the bits of a float expression as unsigned long. The normal cast (unsigned long) float_expression truncates the float to an (unsigned long) integer. But this is not the effect I want for a hash function. With unions my hash function can be implemented: union { long unsigned hashvalue; float floatvalue; } value; value.floatvalue = float_expression; Now value.hashvalue contains the reinterpreted bits as intended. But I think a shorter solution (without assignment or memcpy to a variable) should be possible. When I cast first to (void *) and after that to (unsigned long) the gcc gives me the error: cannot convert to a pointer type It seems casting a float to a pointer is prohibited by gcc. Has anybody an idea to reinterpret the bits of a float as unsigned long without assignment or memcpy (some sort of tricky cast). Greetings Thomas Mertes Seed7 Homepage: http://seed7.sourceforge.net Wikipedia: http://en.wikipedia.org/wiki/Seed7 Project page: http://sourceforge.net/projects/seed7 <thomas.mertes@gmx.at> wrote in message news:1138988079.245030.101090@g47g2000cwa.googlegroups.com... >

long text in colones + tabular + color
I would like to create a table that could contains long text in both colones and unable to do that. Please help me resolve this problem ? Many thanks \begin{tabular}{|>{\raggedright\arraybackslash}m{2.5cm}|>{\raggedright\arraybackslash}m{7.5cm}|} %\begin{tabular}{|l|>{\raggedright\arraybackslash}m{7.5cm}|} \hline \cellcolor{blue!20}& long long long text long long long text long long long text long long long text long long long text\\\cline{2-2} \cellcolor{blue!20}&long long long text long long long text long long long text long long long text.\\\cline{2-2} \cellcolor{blue!20}\multirow{-7}*{case1 case 1 case1 case1 case1 case 1 case1 case1 case1 case 1 case1 case1}&{long long long text long long long text long long long text long long long text.}\\ \hline &long long long text long long long text long long long text long long long text\\\cline{2-2} &long long long text long long long text long long long text long long long text\\\cline{2-2} \multirow{-5}*{case2} &{long long long text long long long text long long long text long long long text}\\ \hline \end{tabular} Le 07/09/2012 21:09, nicolas_laurent545@hotmail.com a �crit : >