Arch Linux

kokos34

Member

Registered: 2016-12-26

Posts: 2

Trying to create VPN connection between Linuxs erver and Win client

I am new to VPN. I have few questions:

1. Is it possible to create connection between Linux OpenVPN server and Windows OpenVPN client?
2. If yes then how should I do it? Generate key for server on Linux, generate client key on Windows and try to connect to server by a client? When I do so, I get the error: "TLS Error: TLS negotiation failed to occur within 60 seconds (check your network connectivity)"

arbacle

Member

Registered: 2015-11-16

Posts: 22

Re: Trying to create VPN connection between Linuxs erver and Win client

First ensure that there's network connectivity - firewalls, etc.
I also had an error like this and it turned out that I had to change the version of my client (see a few threads down).

x33a

Forum Fellow

Registered: 2009-08-15

Posts: 4,587

Re: Trying to create VPN connection between Linuxs erver and Win client

Here's arbacle's thread: https://bbs.archlinux.org/viewtopic.php?id=221082

kokos34

Member

Registered: 2016-12-26

Posts: 2

Re: Trying to create VPN connection between Linuxs erver and Win client

First ensure that there's network connectivity - firewalls, etc.
I also had an error like this and it turned out that I had to change the version of my client (see a few threads down).

That might be the issue. I had to use version 2.0.2 because next versions did not have easy-rsa folder, which I could use to generate keys. On Linux I used 2.0.3.

I don't have to generate both server and client's keys on Linux and then transfer them to client's machine, do I?

x33a

Forum Fellow

Registered: 2009-08-15

Posts: 4,587

Re: Trying to create VPN connection between Linuxs erver and Win client

I don't have to generate both server and client's keys on Linux and then transfer them to client's machine, do I?

You need the CA cert and key to generate client certs. The easiest way to do that is on the server itself. To do that on the client you need to generate a certificate signing request and send it to the server. All of this is covered in the official OpenVPN documentation: https://openvpn.net/index.php/open-sour … howto.html