Setting up ExpressVPN with OpenVPN
-
Hello everyone,
I am a newbie here. and would like to setup my PFSense to connect to ExpressVPN through OpenVPN.
I already have an account with ExpressVPN. I installed PFSense on a Hyper-V VM and setup everything as mentioned in Expressvpn documentation. PFSense is not able to connect to ExpressVPN.
I went through the current topics in the forum but cannot find a similar case to the issue I am experiencing.
I have been almost daily in contact with ExpressVPN support to fix this issue, but they are not able to fix it so far.
Any Advice?
Thanks!! -
@hkohila you will have to provide more information for anyone to help you.
How did you set it up, which tutorial did you follow (the ExpressVPN one is for pfSense version 2.4.5, it states on their website)? What is the error message you get? Does you pfSense installation work correctly, when not using VPN?
-
@hkohila said in Setting up ExpressVPN with OpenVPN:
I already have an account with ExpressVPN. I installed PFSense on a Hyper-V VM and setup everything as mentioned in Expressvpn documentation. PFSense is not able to connect to ExpressVPN.
I just did the same thing. Nearly the same thing, as I don't have a VM, I've a dedicated router device.
I got my user and password, and the ovpn client config file (for a connection to Paris (France).
Two observation :
Not all ExpressVPN locations may be available for manually configured connections.
And instead of using this :
I used this :
remote-random; comp-lzo no; verify-x509-name Server name-prefix; key-direction 1; route-method exe; route-delay 2; tun-mtu 1500; fragment 1450; mssfix 1450; sndbuf 524288; rcvbuf 524288Clicked Save, and back on the main dashboard :
Note that I'm not using it right now, I'm not pushing any traffic through it. It's just connected.
@hkohila said in Setting up ExpressVPN with OpenVPN:
I have been almost daily in contact with ExpressVPN support to fix this issue, but they are not able to fix it so far.
The ExpressVPN exists for helping you with phone, pad and PC/MAC app issues.
They can't be aware of the thousands of different router models out there.
The 'manual' method exists with a condition : You can use it, but you're on your own.I re read the entire setup from here.
It's still valid.
I did change some final Custom settings, see above. -
@Gertjan
Hello,
I downloaded PFSense 2.4.5 and did all the configuration from expressvpn documentation on their website, and applied the changes you posted. Still didn't work.
I also tried all of that on PFSense 2.9. Still not working.
Obviously, I am missing something which is preventing it from connecting.
I have attached the openvpn log file for your review.
PFSense2-4-5 Log 10-8-26.txt
NOTE:
PFSense itself is working seamlessly without OPNVPN. all the issues I have is with OPNVPN.
I am open to any suggestion/recommendation to get this up and running.
Thanks!! -
@patient0
I followed the document published on expressVPN website. I also downloaded the version you mentioned and applied the configuration as in the document. but still no luck.
Attached is the LOG file from PFsense for opnvpn for your review.
Any recommendation?
PFSense2-4-5 Log 10-8-26.txt -
Oct 8 15:44:57 openvpn 29824 TLS: Initial packet from [AF_INET]149.19.196.104:1195, sid=460b6b4c 7d50d597 Oct 8 15:45:56 openvpn 29824 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)I presume that "149.19.196.104" is the resolved IP of an express VPN server.
Here is the file "my_expressvpn_france_-paris-_1_udp(1).ovpn" I downloaded Express :
dev tun fast-io persist-key persist-tun nobind remote france-paris-1-ca-version-2.expressnetw.com 1195 remote-random pull comp-lzo no tls-client verify-x509-name Server name-prefix ns-cert-type server key-direction 1 route-method exe route-delay 2 tun-mtu 1500 fragment 1300 mssfix 1200 verb 3 cipher AES-256-GCM auth SHA512 sndbuf 524288 rcvbuf 524288 auth-user-pass <cert> -----BEGIN CERTIFICATE----- MIIDTjCCAregAwIBAgIDKzZvMA0GCSqGSIb3DQEBCwUAMIGFMQswCQYDVQQGEwJV UzELMAkGA1UECBMCQ0ExFTATBgNVBAcTDFNhbkZyYW5jaXNjbzEVMBMGA1UEChMM Rm9ydC1GdW5zdG9uMRgwFgYDVQQDEw9Gb3J0LUZ1bnN0b24gQ0ExITAfBgkqhkiG ...... qzp4aKuQ6j61c6k1UaQQL0tskqWVzslSFvs9NZyUAJLLdGUc5TT2MiLwiXQwd4Uv H6bGeePdhvB4+ZbW7VMD7TE8hZhjhAL4F6yAP1EQvg3LDA== -----END CERTIFICATE----- </cert> <key> -----BEGIN RSA PRIVATE KEY----- MIIEpAIBAAKCAQEAqzmLfyjotrjAxnr96V4PI9UjuCf+BFVgxe7yXCq9o62Zag/8 7gBcdltWFr8Lpjzujyh+D1PettWjXYrpmlJL/0aZQn85558aqG4SbkxNqAPq0tWz ..... Uhl5sCGfMKkLShiON5P2oxZa+B0aPtQjsdnsFPa1uaZkK4c++SS6AetzYRpVDLmL p7/1CulE0z3O0sBekpwiuaqLJ9ZccC81g4+2j8j6c50rIAct3hxIxw== -----END RSA PRIVATE KEY----- </key> <tls-auth> # # 2048 bit OpenVPN static key # -----BEGIN OpenVPN Static key V1----- 48d9999bd71095b10649c7cb471c1051 .... 7aed27125592a7148d25c87fdbe0a3f6 -----END OpenVPN Static key V1----- </tls-auth> <ca> -----BEGIN CERTIFICATE----- MIIGqjCCBJKgAwIBAgIUfTu1OKHHguAcfIyUn3CIZl2EMDcwDQYJKoZIhvcNAQEN BQAwgYUxCzAJBgNVBAYTAlZHMQwwCgYDVQQIDANCVkkxEzARBgNVBAoMCkV4cHJl .... tRTiqYxB9QAqs7u5WZ82XiYOImN3SgrTcJQPHXWtbUmsx6pxCkHelMMgWCfPSkWG BQCYm/vuOx6Ysea22jH0zuy8GCTYASy7w6ks9JBe -----END CERTIFICATE----- </ca>Here :
you should have this :
You can create the 'CA' certicate with everything you found between the
<ca> -----BEGIN CERTIFICATE----- MIIGqjCCBJKgAwIBAgIUfTu1OKHHguAcfIyUn3CIZl2EMDcwDQYJKoZIhvcNAQEN BQAwgYUxCzAJBgNVBAYTAlZHMQwwCgYDVQQIDANCVkkxEzARBgNVBAoMCkV4cHJl .... tRTiqYxB9QAqs7u5WZ82XiYOImN3SgrTcJQPHXWtbUmsx6pxCkHelMMgWCfPSkWG BQCYm/vuOx6Ysea22jH0zuy8GCTYASy7w6ks9JBe -----END CERTIFICATE----- </ca>I've called it "CA ExpressVPN 2".
You use it here : VPN > OpenVPN > Clients > Edit
Here :
you add a certificate :
Here you copy the two entries :
<cert> -----BEGIN CERTIFICATE----- MIIDTjCCAregAwIBAgIDKzZvMA0GCSqGSIb3DQEBCwUAMIGFMQswCQYDVQQGEwJV UzELMAkGA1UECBMCQ0ExFTATBgNVBAcTDFNhbkZyYW5jaXNjbzEVMBMGA1UEChMM Rm9ydC1GdW5zdG9uMRgwFgYDVQQDEw9Gb3J0LUZ1bnN0b24gQ0ExITAfBgkqhkiG ...... qzp4aKuQ6j61c6k1UaQQL0tskqWVzslSFvs9NZyUAJLLdGUc5TT2MiLwiXQwd4Uv H6bGeePdhvB4+ZbW7VMD7TE8hZhjhAL4F6yAP1EQvg3LDA== -----END CERTIFICATE----- </cert> <key> -----BEGIN RSA PRIVATE KEY----- MIIEpAIBAAKCAQEAqzmLfyjotrjAxnr96V4PI9UjuCf+BFVgxe7yXCq9o62Zag/8 7gBcdltWFr8Lpjzujyh+D1PettWjXYrpmlJL/0aZQn85558aqG4SbkxNqAPq0tWz ..... Uhl5sCGfMKkLShiON5P2oxZa+B0aPtQjsdnsFPa1uaZkK4c++SS6AetzYRpVDLmL p7/1CulE0z3O0sBekpwiuaqLJ9ZccC81g4+2j8j6c50rIAct3hxIxw== -----END RSA PRIVATE KEY----- </key>"Certificate data" and "Private key data", so everything between <cert> and </cert> and <key> ... </key>.
You use this certificate here :
In the "my_expressvpn_france_-paris-_1_udp(1).ovpn" file you also found :
<tls-auth> # # 2048 bit OpenVPN static key # -----BEGIN OpenVPN Static key V1----- 48d9999bd71095b10649c7cb471c1051 .... 7aed27125592a7148d25c87fdbe0a3f6 -----END OpenVPN Static key V1----- </tls-auth>and you copy this part in the VPN Client setup here :
Other TLS related stuff :
Check that you have the 3 "Data Encryption Algorithms" shown.
I presume you've entered your user ID here :
The top part of the config :
If all is copied correctly, no more TLS errors.
edit : setting up a opvn client is no more, and no less as "copy paste things".
Privacy Policy · Cookie Policy