Comments (7)
Hi, you can add the --no-verify option to avoid certificate verification.
Which webserver are you using ? are curl and the vpn-ws-client using the same libssl version ?
npn is supported, but alpn requires a bit of work.
from vpn-ws.
added --no-verify it works, but looks not so stable like log:
[Sun Jul 19 22:24:21 2015] connected to cctrs.net port 943 (transport: wss)
[Sun Jul 19 22:24:21 2015] disconnected
[Sun Jul 19 22:24:40 2015] connecting to cctrs.net port 943 (transport: wss)
[Sun Jul 19 22:25:41 2015] connected to cctrs.net port 943 (transport: wss)
[Sun Jul 19 22:25:41 2015] disconnected
[Sun Jul 19 22:26:01 2015] connecting to cctrs.net port 943 (transport: wss)
[Sun Jul 19 22:27:01 2015] connected to cctrs.net port 943 (transport: wss)
[Sun Jul 19 22:27:01 2015] disconnected
curl and vpn-ws-client using the same libssl, ssl terminator is nginx.
./vpn-ws-client --no-verify vpn0 --exec "ifconfig vpn0 192.168.173.2 netmask 255.255.255.0"
./vpn-ws --tuntap vpn0 --exec "ifconfig vpn0 192.168.173.1 netmask 255.255.255.0"
In the client side, can't ping 192.168.173.1, any thing I missed?
Thanks :)
from vpn-ws.
do you have logs of the vpn-ws server ? are you sure nginx is correctly communicating with it ?
from vpn-ws.
It looks not correctly..
2015/07/19 23:38:48 [error] 15658#0: *36 upstream timed out (110: Connection timed out) while reading upstream, client: x.x.x.x, server: localhost, request: "GET /vpn HTTP/1.1", upstream: "uwsgi://unix:/run/vpn.sock:", host: "cctrs.net:943"
The socket path is right.
from vpn-ws.
you should post nginx configuration and the full comand line of the vpn-ws server
from vpn-ws.
./vpn-ws --tuntap vpn0 /run/vpn.sock
server {
listen 943;
server_name cctrs.net;
ssl on;
ssl_certificate cert.pem;
ssl_certificate_key key.pem;
ssl_session_timeout 5m;
ssl_protocols SSLv3 TLSv1;
ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+EXP;
ssl_prefer_server_ciphers on;
location /vpn {
include uwsgi_params;
uwsgi_pass unix:/run/vpn.sock;
}
}
from vpn-ws.
ensure nginx has write access over /run/vpn.sock, eventually strace the vpn-ws process to udnerstand what is going on
from vpn-ws.
Related Issues (16)
- VLAN support
- SSL-specific build error
- VPN to local proxy?
- the exec trick issue
- can you edit some parts?! HOT 2
- IPv6 support on client
- vpn-ws-client-static
- some frameworks are deprecated
- ethtool: autonegotiation is unset or enabled, the speed and duplex are not writable
- stop immediately without any error
- Documentation on assigning IP address to a network interface HOT 3
- Apache2 and uWSGI HOT 3
- Connection refused HOT 22
- Client proxy support HOT 1
- the interface ws0 isn't generated at all
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from vpn-ws.