Freebox Server (Ultra V9/ Pop V8/ Delta V7 / Revolution V6 / Mini 4K)

Attached to Project: Freebox Server (Ultra V9/ Pop V8/ Delta V7 / Revolution V6 / Mini 4K)
Opened by fujisan - 15/12/2014
Last edited by mbizon - 26/08/2020

J’essaie d’accéder à un serveur openVPN (PureVPN) depuis mon PC sous Fedora.
Il ne s’agit pas du client VPN de la Freebox (qui fonctionne bien) mais bien de mon PC.

J’ai des erreurs comme celles ci-dessous. La même configuration openvpn marche très bien depuis un PC connecté hors de chez moi (pas sur le réseau Free).
C’est peut-être lié à la version 3.0.3 du FBX server.
Par contre, je n’ai aucun problème avec une connexion PPTP.

Quelqu’un a-t-il rencontré le même soucis?

Cordialement,
F.

Dec 13 20:17:31 tosca NetworkManager[1049]: <info> Starting VPN service 'openvpn'...
Dec 13 20:17:31 tosca NetworkManager[1049]: <info> VPN service 'openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 22340
Dec 13 20:17:31 tosca NetworkManager[1049]: <info> VPN service 'openvpn' appeared; activating connections
Dec 13 20:17:31 tosca NetworkManager[1049]: <info> VPN plugin state changed: starting (3)
Dec 13 20:17:31 tosca NetworkManager: ** Message: openvpn started with pid 22347
Dec 13 20:17:31 tosca NetworkManager[1049]: <info> VPN connexion 'PureVPN (France, UDP)' (ConnectInteractive) reply received.
Dec 13 20:17:31 tosca nm-openvpn[22347]: OpenVPN 2.3.4 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Nov 21 2014
Dec 13 20:17:31 tosca nm-openvpn[22347]: library versions: OpenSSL 1.0.1j-fips 15 Oct 2014, LZO 2.08
Dec 13 20:17:31 tosca nm-openvpn[22347]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Dec 13 20:17:31 tosca nm-openvpn[22347]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 13 20:17:31 tosca nm-openvpn[22347]: Control Channel Authentication: using '/home/xxx/Documents/VPN/purevpn/Linux OpenVPN Updated files/Wdc.key' as a OpenVPN static key file
Dec 13 20:17:31 tosca nm-openvpn[22347]: UDPv4 link local: [undef]
Dec 13 20:17:31 tosca nm-openvpn[22347]: UDPv4 link remote: [AF_INET]94.249.245.31:53
Dec 13 20:17:32 tosca nm-openvpn[22347]: VERIFY ERROR: depth=0, error=certificate signature failure: C=HK, ST=HK, L=HongKong, O=PureVPN, OU=IT, CN=PureVPN, name=PureVPN, emailAddress=mail@host.domain
Dec 13 20:17:32 tosca nm-openvpn[22347]: TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Dec 13 20:17:32 tosca nm-openvpn[22347]: TLS Error: TLS object -> incoming plaintext read error
Dec 13 20:17:32 tosca nm-openvpn[22347]: TLS Error: TLS handshake failed
Dec 13 20:17:32 tosca nm-openvpn[22347]: SIGUSR1[soft,tls-error] received, process restarting
Dec 13 20:17:34 tosca nm-openvpn[22347]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Dec 13 20:17:34 tosca nm-openvpn[22347]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 13 20:17:34 tosca nm-openvpn[22347]: UDPv4 link local: [undef]
Dec 13 20:17:34 tosca nm-openvpn[22347]: UDPv4 link remote: [AF_INET]94.249.245.31:53
Dec 13 20:17:34 tosca nm-openvpn[22347]: VERIFY ERROR: depth=0, error=certificate signature failure: C=HK, ST=HK, L=HongKong, O=PureVPN, OU=IT, CN=PureVPN, name=PureVPN, emailAddress=mail@host.domain
Dec 13 20:17:34 tosca nm-openvpn[22347]: TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Dec 13 20:17:34 tosca nm-openvpn[22347]: TLS Error: TLS object -> incoming plaintext read error
Dec 13 20:17:34 tosca nm-openvpn[22347]: TLS Error: TLS handshake failed
Dec 13 20:17:34 tosca nm-openvpn[22347]: SIGUSR1[soft,tls-error] received, process restarting
Dec 13 20:17:36 tosca nm-openvpn[22347]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Dec 13 20:17:36 tosca nm-openvpn[22347]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 13 20:17:36 tosca nm-openvpn[22347]: UDPv4 link local: [undef]
Dec 13 20:17:36 tosca nm-openvpn[22347]: UDPv4 link remote: [AF_INET]94.249.245.31:53
Dec 13 20:17:37 tosca nm-openvpn[22347]: VERIFY ERROR: depth=0, error=certificate signature failure: C=HK, ST=HK, L=HongKong, O=PureVPN, OU=IT, CN=PureVPN, name=PureVPN, emailAddress=mail@host.domain
Dec 13 20:17:37 tosca nm-openvpn[22347]: TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Dec 13 20:17:37 tosca nm-openvpn[22347]: TLS Error: TLS object -> incoming plaintext read error
Dec 13 20:17:37 tosca nm-openvpn[22347]: TLS Error: TLS handshake failed
Dec 13 20:17:37 tosca nm-openvpn[22347]: SIGUSR1[soft,tls-error] received, process restarting
Dec 13 20:17:39 tosca nm-openvpn[22347]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Dec 13 20:17:39 tosca nm-openvpn[22347]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 13 20:17:39 tosca nm-openvpn[22347]: UDPv4 link local: [undef]
Dec 13 20:17:39 tosca nm-openvpn[22347]: UDPv4 link remote: [AF_INET]94.249.245.31:53
Dec 13 20:17:39 tosca nm-openvpn[22347]: VERIFY ERROR: depth=0, error=certificate signature failure: C=HK, ST=HK, L=HongKong, O=PureVPN, OU=IT, CN=PureVPN, name=PureVPN, emailAddress=mail@host.domain
Dec 13 20:17:39 tosca nm-openvpn[22347]: TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Dec 13 20:17:39 tosca nm-openvpn[22347]: TLS Error: TLS object -> incoming plaintext read error
Dec 13 20:17:39 tosca nm-openvpn[22347]: TLS Error: TLS handshake failed
Dec 13 20:17:39 tosca nm-openvpn[22347]: SIGUSR1[soft,tls-error] received, process restarting
[....]