Closed VPS OCS Panel Concern

[freetextmike]

Good day,

Dahil marami tayong time ngayon na quarantine naiisip ko mag explore ng magagawa at eto yun , although gumagana na ang panel ko without problems, meron akong tanong,

nung nag install ako ng openvpn sa vps ko not using bonchan script ung na generate na ovpn ay gumagana sa modem, router and android/windows/linux client. pero ung mga na gegenerate sa VPS na may OCS + VPN script ni boss bonchan di nagana sa modem, nag basa basa ako na dahil daw isa lang ang certificate na nasa loob pero hindi ko masabi paps, kahit wag na spoonfeeding pero sana matulungan nyo ako kung anong direction ba tlga ang problemang ito.


tapos Dagdag question na din pwede ko bang ma edit ung na generate na mga config na without payload po kasi by default lang po tlga ang gusto ko


B A R T S tag kita sir kasi baka alam mo haha. Salamat po sa mga tutulong! Magandang hapon po

 

[iamBARTX]

if gamit mo yung debian9 script ni paps Bon-chan at kakainstall mo lang, di pwede gamitan ng old payload header yan. bawal po yung may "" sa payload header. if naka dns naman yung server mo di na need ng payload header kasi kahit walang payload nakakakonek ka pa rin naman as long yung http proxy eh naka dns.

 

[freetextmike]

if gamit mo yung debian9 script ni paps Bon-chan at kakainstall mo lang, di pwede gamitan ng old payload header yan. bawal po yung may "" sa payload header. if naka dns naman yung server mo di na need ng payload header kasi kahit walang payload nakakakonek ka pa rin naman as long yung http proxy eh naka dns.

yes paps ung debian9 ung gamit ko, ung error sir ano sa tingin mo saan kaya to pwede is trouble shoot

 

[iamBARTX]

yes paps ung debian9 ung gamit ko, ung error sir ano sa tingin mo saan kaya to pwede is trouble shoot

sinagot na tanong mo sa taas. iniedit mo ba yung generated na config?

 

[freetextmike]

sinagot na tanong mo sa taas. iniedit mo ba yung generated na config?

sa header po ba yan? salamat po !tignan ko po, btw ano po ba gamit nyo sa vps nyo?

 

[iamBARTX]

sa header po ba yan? salamat po !tignan ko po, btw ano po ba gamit nyo sa vps nyo?

gamit na ano?

 

[freetextmike]

client
dev tun
proto tcp
remote 34.66.14.217 110
remote-cert-tls server
connect-retry infinite
resolv-retry infinite
nobind
tun-mtu 1500
mssfix 1460
persist-key
persist-tun
auth-user-pass
auth none
auth-nocache
cipher none
keysize 0
comp-lzo
setenv CLIENT_CERT 0
reneg-sec 0
verb 1


<ca>
-----BEGIN CERTIFICATE-----
MIIEATCCA2qgAwIBAgIJAOCyX0XMJp/pMA0GCSqGSIb3DQEBCwUAMIGyMQswCQYD
....
...
...
..
..
BEUv/Z1/AWr7BLBIQCtMUZkmYVGJ
-----END CERTIFICATE-----
</ca>

eto po ung config na na generate dun sa vps na may install ung script ni sir bon

client
dev tun
proto tcp
sndbuf 0
rcvbuf 0
remote 34.87.22.129 110
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA512
cipher AES-256-CBC
setenv opt block-outside-dns
key-direction 1
verb 3
<ca>
-----BEGIN CERTIFICATE-----
MIIDKzCCAhOgAwIBAgIJAJTR5OF2M40oMA0GCSqGSIb3DQEBCwUAMBMxETAPBgNV
BAMMCENoYW5nZU1lMB4XDTIwMDQwNTA2MTE1MVoXDTMwMDQwMzA2MTE1MVowEzER
MA8GA1UEAwwIQ2hhbmdlTWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPcApJGewYh54GDq1dii9jDB61HhHuBwjQwyjsXT30m9hloeaxOTN/eAfXRtIy
TsQw/5HoEZ+tYKdNxgr71CMHnItVKdodP/a+KAjGKCqhssdiLZx2KBIAvDz4ekIl
xixJpDH6aIO/f0Y6k3S/GACUcr1fYyytbQUzR2sr3Ft7HHzxf0a01yMWM0EnCXg3
fQ0LR/zAL
BgNVHQ8EBAMCAQYwDQYJKoZIhvcNAQELBQADggEBAAAwlY5oVFRTJc80PzzGhg+f
bGabvrkR9IQnIFq3pOwl68JWSjkAoz+lmCZayx9Z3D6HSNX1mLFLm7JoU/nDG1+6
b5K6VLc/fDAc39nVt6JNJeRwvUr6Dq+aNgSpYJVNFarMxkB/Whh8MGccLpXGaQJM
6IAEo10cy6FXfiHeOnZffmQaHNj2nL2xhli5R3fPd+k3SPAYR6qGTUN7S5aDrKAD
1LfzlEmErg1bd2+wojFRFZ5ZIDajjuO+68qVM3Tqmv/IRucLTGoOKrM3z3duubEL
5q60Tos7SFaACBQnIilc99po6XTMDwZiofs9xyAGTKZe74/23jsnF8jSspRiEMU=
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
MIIDRDCCAiygAwIBAgIRALh+KZggMKzk/+omjT0N5kkwDQYJKoZIhvcNAQELBQAw
EzERMA8GA1UEAwwIQ2hhbmdlTWUwHhcNMjAwNDA1MDYxMTUxWhcNMzAwNDAzMDYx
MTUxWjARMQ8wDQYDVQQDDAZjbGllbnQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDcLWEN4qeIi42/I/ZhqgjnTbTx+mPZH8BHr9UHmgt8oN5V+rbijJca
4f5IMm/kFlS/2R+9lt1d5oFdJPrTw4geV6wo2EG1LA3oYP2N3dNYIixnP+sRuoOv
4pqnl
O9NTveQIQ884Bv7GHLChF6QVMBMxETAPBgNVBAMMCENoYW5nZU1lggkAlNHk4XYz
jSgwEwYDVR0lBAwwCgYIKwYBBQUHAwIwCwYDVR0PBAQDAgeAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAThFZvvxRiIqF9Kpgxb4fHLUVQqpANkIib2qpwREYlcJEGgCBhJpU
Jl4/r/xRwAqwdWFM9qp6AmEl7btHYoC8AYFXJA6NRr9rZ6bdH3hGHqsqY+GLZJ8p
9hcZQYzQcZxAadOgZIQNzD0X+wb4mXXsZBDc8G+RuZxKXY8wl90HqdEAN8SR4b+3
sbpKNRRE5M1uIpi7Vzz8pnol8Wzsief9Qp7A1Evhl6kMqUkwSxxJDcSSlOyvdkWV
A+EqdYoTK+Z+vcTqB5OMgyqldTghJh/wLzZhaiE2BsAwkUqgFd2S6mpdf+F5udtJ
9bWcjl4WtL4jgwcl+gEhjeC5M3tkA1Cf
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQDcLWEN4qeIi42/
I/ZhqgjnTbTx+mPZH8BHr9UHmgt8oN5V+rbijJca4f5IMm/kFlS/2R+9lt1d5oFd
JPrTw4geV6wo2EG1LA3oYP2N3dNYIixnP+sRuoOv4pOqzcb1PK2Ay0C9IiPVNNIh
GmDu/ez9Z5AsEs3p4UQiMipuo/USMeS0NwXm+xhoFRtWO23ZkZJNFdp/WEed3UpY
MYN842YkHvweZzpfV5HOl25nNHgRZ9q1zfo2sudKMvF4nequWVsMWFIrh+lCJ+3e
rjbp7RrutJhzozSVXblZMxvLlWrWP/gb3JBOuVr2BOVhLSDYltdspbPMsAlwIhGG
jY
7VkrC5UL/qjU1yEKyFFA0MR0hcTNvO+WcslPyEsufZpjtqRYjHoMfreSXpJhqBNl
m4mim9WPnXElo+hkOC6mqRNR7wKBgQDcp464iDdGU4nZ42oO5/zq9bF6JmgFphoO
+PAwLzioAPrepplQBl3h1oAsU5yAY+gvqMFb27+PU85S+pkm6M8RJgDGrssRGSdE
x+0odhulx5a+zSRrQslIvhcqrhStaiCU1isdq2mI4OXljtdleGsMIMIDkuXVvebZ
+AqvQ3ZLXwKBgEmb3Zj0rtNDiNpTvByU7/I8Jkd0CU89T+8ZC3Pp6rD8cnfpdLf6
4GBSWGPaii9y8VqvDljjCrop6djYUVW5R1mdE80KDBKRD2dxA+D+h63gIi77A7tB
xnrkB64U6ZlUNxWBHWZeWX2nHN1hNn2wDUA7UZX503H6QmwmuGK0E+onAoGAOl44
aqfdt0Sx2mlFzNuhE6YaZG10ZsohaoR/RL+5BPf9ZJg9ReXpP6w2C4OyimPjL3g8
bcgbTBanJVwU1y4OWELtQaFLJiK5OICKQ4G6nofFYINzdswb4pomFqwl3BmOtNBS
Z27IY+TZ63d1kunfpz2jFL7u/TNWtaHfca0uxZECgYAggpYexh43RnN0DKnaqeJv
77EJFbcXlo/ITYrT19lQ+LUe2igP3jy5X04Z1xuDMZmT+HFKA7yMjvhrMlzmsenC
uzlLA1J/WGzVXRPGckJ0Vzd9r45NKEGEVRrGdZVB+C/ViwI/BSKyhWxiS++D2LYj
HhTC4t5LxTo4xsaJBLgjRA==
-----END PRIVATE KEY-----
</key>
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
879d7e2162dfad9d3b4553b3d0997643
680e6f544e92ca675933a6504eb0f4cf
2ea09bd919bc8006b61777c05fa09b88
814
e09f9e0d90ad327efc4a0b91309bfc5f
c8708ae5489db81b740dcd2409e58240
5042884ff5e6515532bdb48fca558675
c761b0a8aef0161cff28a0f28858ce6a
68eae68196dd5cfda2ab5773409f2fe6
381eabd429e70b528b127ab2526f968f
dd245c2b1194a6dc9db748c80a42611c
-----END OpenVPN Static key V1-----
</tls-auth>

eto naman po sa ung generic na openvpn lang

anong
Gamit pong OS sa VPS nyo po sir?

 

[iamBARTX]

client
dev tun
proto tcp
remote 34.66.14.217 110
remote-cert-tls server
connect-retry infinite
resolv-retry infinite
nobind
tun-mtu 1500
mssfix 1460
persist-key
persist-tun
auth-user-pass
auth none
auth-nocache
cipher none
keysize 0
comp-lzo
setenv CLIENT_CERT 0
reneg-sec 0
verb 1


<ca>
-----BEGIN CERTIFICATE-----
MIIEATCCA2qgAwIBAgIJAOCyX0XMJp/pMA0GCSqGSIb3DQEBCwUAMIGyMQswCQYD
....
...
...
..
..
BEUv/Z1/AWr7BLBIQCtMUZkmYVGJ
-----END CERTIFICATE-----
</ca>

eto po ung config na na generate dun sa vps na may install ung script ni sir bon

client
dev tun
proto tcp
sndbuf 0
rcvbuf 0
remote 34.87.22.129 110
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA512
cipher AES-256-CBC
setenv opt block-outside-dns
key-direction 1
verb 3
<ca>
-----BEGIN CERTIFICATE-----
MIIDKzCCAhOgAwIBAgIJAJTR5OF2M40oMA0GCSqGSIb3DQEBCwUAMBMxETAPBgNV
BAMMCENoYW5nZU1lMB4XDTIwMDQwNTA2MTE1MVoXDTMwMDQwMzA2MTE1MVowEzER
MA8GA1UEAwwIQ2hhbmdlTWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPcApJGewYh54GDq1dii9jDB61HhHuBwjQwyjsXT30m9hloeaxOTN/eAfXRtIy
TsQw/5HoEZ+tYKdNxgr71CMHnItVKdodP/a+KAjGKCqhssdiLZx2KBIAvDz4ekIl
xixJpDH6aIO/f0Y6k3S/GACUcr1fYyytbQUzR2sr3Ft7HHzxf0a01yMWM0EnCXg3
fQ0LR/zAL
BgNVHQ8EBAMCAQYwDQYJKoZIhvcNAQELBQADggEBAAAwlY5oVFRTJc80PzzGhg+f
bGabvrkR9IQnIFq3pOwl68JWSjkAoz+lmCZayx9Z3D6HSNX1mLFLm7JoU/nDG1+6
b5K6VLc/fDAc39nVt6JNJeRwvUr6Dq+aNgSpYJVNFarMxkB/Whh8MGccLpXGaQJM
6IAEo10cy6FXfiHeOnZffmQaHNj2nL2xhli5R3fPd+k3SPAYR6qGTUN7S5aDrKAD
1LfzlEmErg1bd2+wojFRFZ5ZIDajjuO+68qVM3Tqmv/IRucLTGoOKrM3z3duubEL
5q60Tos7SFaACBQnIilc99po6XTMDwZiofs9xyAGTKZe74/23jsnF8jSspRiEMU=
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
MIIDRDCCAiygAwIBAgIRALh+KZggMKzk/+omjT0N5kkwDQYJKoZIhvcNAQELBQAw
EzERMA8GA1UEAwwIQ2hhbmdlTWUwHhcNMjAwNDA1MDYxMTUxWhcNMzAwNDAzMDYx
MTUxWjARMQ8wDQYDVQQDDAZjbGllbnQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDcLWEN4qeIi42/I/ZhqgjnTbTx+mPZH8BHr9UHmgt8oN5V+rbijJca
4f5IMm/kFlS/2R+9lt1d5oFdJPrTw4geV6wo2EG1LA3oYP2N3dNYIixnP+sRuoOv
4pqnl
O9NTveQIQ884Bv7GHLChF6QVMBMxETAPBgNVBAMMCENoYW5nZU1lggkAlNHk4XYz
jSgwEwYDVR0lBAwwCgYIKwYBBQUHAwIwCwYDVR0PBAQDAgeAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAThFZvvxRiIqF9Kpgxb4fHLUVQqpANkIib2qpwREYlcJEGgCBhJpU
Jl4/r/xRwAqwdWFM9qp6AmEl7btHYoC8AYFXJA6NRr9rZ6bdH3hGHqsqY+GLZJ8p
9hcZQYzQcZxAadOgZIQNzD0X+wb4mXXsZBDc8G+RuZxKXY8wl90HqdEAN8SR4b+3
sbpKNRRE5M1uIpi7Vzz8pnol8Wzsief9Qp7A1Evhl6kMqUkwSxxJDcSSlOyvdkWV
A+EqdYoTK+Z+vcTqB5OMgyqldTghJh/wLzZhaiE2BsAwkUqgFd2S6mpdf+F5udtJ
9bWcjl4WtL4jgwcl+gEhjeC5M3tkA1Cf
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQDcLWEN4qeIi42/
I/ZhqgjnTbTx+mPZH8BHr9UHmgt8oN5V+rbijJca4f5IMm/kFlS/2R+9lt1d5oFd
JPrTw4geV6wo2EG1LA3oYP2N3dNYIixnP+sRuoOv4pOqzcb1PK2Ay0C9IiPVNNIh
GmDu/ez9Z5AsEs3p4UQiMipuo/USMeS0NwXm+xhoFRtWO23ZkZJNFdp/WEed3UpY
MYN842YkHvweZzpfV5HOl25nNHgRZ9q1zfo2sudKMvF4nequWVsMWFIrh+lCJ+3e
rjbp7RrutJhzozSVXblZMxvLlWrWP/gb3JBOuVr2BOVhLSDYltdspbPMsAlwIhGG
jY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-----END PRIVATE KEY-----
</key>
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
879d7e2162dfad9d3b4553b3d0997643
680e6f544e92ca675933a6504eb0f4cf
2ea09bd919bc8006b61777c05fa09b88
814
e09f9e0d90ad327efc4a0b91309bfc5f
c8708ae5489db81b740dcd2409e58240
5042884ff5e6515532bdb48fca558675
c761b0a8aef0161cff28a0f28858ce6a
68eae68196dd5cfda2ab5773409f2fe6
381eabd429e70b528b127ab2526f968f
dd245c2b1194a6dc9db748c80a42611c
-----END OpenVPN Static key V1-----
</tls-auth>

eto naman po sa ung generic na openvpn lang

anong
Gamit pong OS sa VPS nyo po sir?

debian9 din naman ginamit ko. gawin mo lagyan mo ng

http-proxy naka dns dapat yung ip ng server mo. kahit ala ng payload

 

[bloodone12]

boss B A R T S gnyan din error ko anu ggwin ko pra mag connect?

 

[freetextmike]

boss B A R T S gnyan din error ko anu ggwin ko pra mag connect?

Gamitin mo ung vps script installer ni shadow o kay wangzki yan yung naging workaround ko . Hindj ko alam masyado kung ano sinasabi ni sir barts pero upon reading po sa mga related topics stackoverflow it seems po na sa certificate or sa version ng openvpn na gamit ni bonchan ang problema. Triny ko i tweak pero dingumana kaya bumalik ako dun sa fallout method ko which is mentioned above


Hopefully nakaturog.

 

[bloodone12]

Gamitin mo ung vps script installer ni shadow o kay wangzki yan yung naging workaround ko . Hindj ko alam masyado kung ano sinasabi ni sir barts pero upon reading po sa mga related topics stackoverflow it seems po na sa certificate or sa version ng openvpn na gamit ni bonchan ang problema. Triny ko i tweak pero dingumana kaya bumalik ako dun sa fallout method ko which is mentioned above


Hopefully nakaturog.

maraming salamat dto boss matanung ko lng poh nakagawa n kc ako ng panel panu po kaya ako gagawa ng new user? panu ko sya lalagyan ng menu kc po reseller menu lng meron s script ng ocs panel ni boss chan at ni boss shadow