Replies: 4 comments 10 replies
-
|
I don't see a reason why that should not be possible (assuming that server is properly set up and configured). |
Beta Was this translation helpful? Give feedback.
-
|
Hi, |
Beta Was this translation helpful? Give feedback.
-
|
This is not a sequence of commands. These do not explain how to get to your results. |
Beta Was this translation helpful? Give feedback.
-
|
sudo docker run -e SERVERFQDN=localhost -e CLIENTFQDN=localhost -v /etc/openvpn/oqs_data:/etc/openvpn -d -p 1194:1194/udp --cap-add=NET_ADMIN openquantumsafe/openvpn sudo docker run -e OQSSIGALG=$OQS_SIGALG -e SERVERFQDN=localhost -e CLIENTFQDN=localhost -v $OQS_DATA:/config/openvpn --rm openquantumsafe/openvpn sh -c "cd /config/openvpn && createcerts_and_config.sh export OQS_DATA="ovpn-data-oqstest" export OQS_NETWORK="oqsopenvpntestnet" export OQS_SERVER="oqsopenvpnserver" export OQS_CLIENT="oqsopenvpnclient" docker volume create --name $OQS_DATA docker run -e SERVERFQDN=localhost -e CLIENTFQDN=localhost -v $OQS_DATA:/config/openvpn --rm openquantumsafe/openvpn sh -c "cd /config/openvpn && createcerts_and_config.sh" docker run --rm --name localhost --net $OQS_NETWORK -v $OQS_DATA:/etc/openvpn -d --cap-add=NET_ADMIN openquantumsafe/openvpn docker run --rm --name localhost --net $OQS_NETWORK -v $OQS_DATA:/etc/openvpn --cap-add=NET_ADMIN -it openquantumsafe/openvpn clientstart.sh |
Beta Was this translation helpful? Give feedback.
-
|
Thanks for these commands. They look very strange: It seems you try to create an OpenVPN connection on "localhost" and not on separate (virtual) machines -- all the while still creating a docker network: Why? Also, I have no idea whether |
Beta Was this translation helpful? Give feedback.
-
|
I tried to run the command that are mentioned in usage.md but it gives an error on the first command that udp4 0.0.0.0:1194: bind: address already in use. Now latest update is that docker container is running and openvpn is connecting but I didn't see any quantum safe or any signature algorithm in that. So can you help me out in this. CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES Also I getting below error after applying the command: (sudo docker run --rm --name $OQS_CLIENT --net $OQS_NETWORK -v $OQS_DATA:/etc/openvpn --cap-add=NET_ADMIN -it openquantumsafe/openvpn clientstart.sh) 2024-08-03 11:07:01 us=785613 Sent fatal SSL alert: unknown CA |
Beta Was this translation helpful? Give feedback.
-
That means your docker network setup is not clean on your machine. Reset it. I just did cut-copy-paste of USAGE.md and a perfect client/server setup documenting proper use of a dilithium3 cert is the result: Anyway, this question has nothing to do with this issue, so apologies to @T-449 for the spam. @muhammadsaad10 : Do a full reset of your docker system and try from USAGE.md. It must work. If ports are locked, you need to free those ports. This has nothing to do with OQS just docker.
Same question as to @muhammadsaad10 : What's the complete sequence of commands you tried? Be specific as to which command you ran on which machine. |
Beta Was this translation helpful? Give feedback.
-
|
Sir, thankyou for the help. It is working now. Further I want to connect the client with the server. I am using OpenVPN GUI client on Windows machine to establish and trying to connect a quantum safe VPN. You are requested to please help me out in this. |
Beta Was this translation helpful? Give feedback.
-
|
I do not have Windows and thus am unable to help in this. |
Beta Was this translation helpful? Give feedback.
-
|
Ok fine Sir, I can also used another ubuntu machine and act that as a client. So kindly let me know how can we establish the quantum safe VPN connectivity between one ubuntu server and another ubuntu client |
Beta Was this translation helpful? Give feedback.
-
|
You already did everything following USAGE.md, using Ubuntu (docker-based virtual) machines. All that's needed is to apply the same to your real client & server hosts. Getting this done does not require specific OQS know-how. |
Beta Was this translation helpful? Give feedback.
-
|
Thank you Sir for the support |
Beta Was this translation helpful? Give feedback.
-
Hi,
I was thinking if it was possible to use the openvpn docker client to connect to an external server instead of? I tried changing the client.config with the ip of the desired server in "remote oqsopenvpnserver 1194 udp" but it didn't work.
Beta Was this translation helpful? Give feedback.
All reactions