[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] Options error: specify only one of --tls-server, --tls-client, or --secret


  • Subject: Re: [Openvpn-users] Options error: specify only one of --tls-server, --tls-client, or --secret
  • From: James Yonan <jim@xxxxxxxxx>
  • Date: Fri, 3 Sep 2004 11:28:01 -0600 (MDT)


On Fri, 3 Sep 2004, Terry Dooher wrote:

> Jon Bendtsen wrote:
> 
> >> local x.x.x.x
> >>
> >> dev tun
> >>
> >> proto tcp-server
> > 
> > i think it is this one. I would suggest looking into the 2.0 release 
> > notes and
> > the config files there. Also take a look at the easy-rsa scripts.
> 
> After locating some more useful docs, I've reverted to UDP.
> 
> http://sites.inka.de/sites/bigred/devel/tcp-tcp.html points out that TCP 
> encapsualtion of TCP is a abd idea in general thanks to the 
> retransmission algorithms.
> 
> This didn't fix the problem, however. I re-read the release notes and 
> found that, currently, 2.0 requires TLS and doesn't work with --secret 
> at all. Not sure how I managed to miss that the first time round.

2.0 only requires TLS if you are using the new "server" mode, i.e.  
one-to-many tunnels.  For point-to-point tunnels, you can use static keys
("secret") just as in 1.x.

> Can I petition for a change to the misleading error message for now?

Certainly -- this is one of the downsides of macros, of course, that macro 
expansions can lead to error messages that don't make sense unless you are 
aware of the expansion that is taking place.

James


____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users