Messages

1

23.1 Legacy Series / Re: OpenVPN not work after update OPNSense from 23.1.1_2->23.1.3

« on: March 14, 2023, 02:39:46 pm »

Hi
just wanted to follow up that i got my issue fixed.
below was what fixed my issue.


in openvpn server settings:

i changed certificate depth to 2
 
 then i adjusted the cipher in use

cipher in use was AES-128-CBC

connection is working now for me now after changing

2

23.1 Legacy Series / Re: OpenVPN not work after update OPNSense from 23.1.1_2->23.1.3

« on: March 14, 2023, 01:06:54 pm »

Hi
just wanted to post here to say I am also having an openvpn error after running the upgrade. below is a recent log i am getting in openvpn logs. confirmed the same on 2 separate devices



2023-03-14T11:58:05   Error   openvpn_server2   x.x.x.x:42371 TLS Error: TLS handshake failed   
2023-03-14T11:58:05   Error   openvpn_server2   x.x.x.x:42371 TLS Error: TLS object -> incoming plaintext read error   
2023-03-14T11:58:05   Error   openvpn_server2   x.x.x.x:42371 TLS_ERROR: BIO read tls_read_plaintext error   
2023-03-14T11:58:05   Error   openvpn_server2   1x.x.x.x:42371 OpenSSL: error:1417C086:SSL routines:tls_process_client_certificate:certificate verify failed   
2023-03-14T11:58:05   Warning   openvpn_server2   x.x.x.x:42371 WARNING: Failed running command (--tls-verify script): external program exited with error status: 1   
2023-03-14T11:58:05   Warning   openvpn   Certificate depth 2 exceeded max allowed depth of 1.