31
General Discussion / Re: Can't get into openvpn
« on: February 18, 2024, 02:43:38 am »...
2024-01-12 00:25:59 OpenSSL: error:0308010C:digital envelope routines::unsupported:Global default library context, Algorithm (RC2-40-CBC : 0), Properties ()
2024-01-12 00:25:59 OpenSSL: error:11800071:PKCS12 routines::mac verify failure:
2024-01-12 00:25:59 Decoding PKCS12 failed. Probably wrong password or unsupported/legacy encryption
2024-01-12 00:25:59 SIGUSR1[soft,private-key-password-failure] received, process restarting
2024-01-12 00:26:06 OpenSSL: error:0308010C:digital envelope routines::unsupported:Global default library context, Algorithm (RC2-40-CBC : 0), Properties ()
2024-01-12 00:26:06 OpenSSL: error:11800071:PKCS12 routines::mac verify failure:
2024-01-12 00:26:06 Decoding PKCS12 failed. Probably wrong password or unsupported/legacy encryption
2024-01-12 00:26:06 SIGUSR1[soft,private-key-password-failure] received, process restarting
2024-01-12 00:26:23 ERROR: could not read Private Key username/password/ok/string from management interface
2024-01-12 00:26:23 Exiting due to fatal error
You need the legacy provider for RC2-40-CBC in OpenSSL.
On the iOS OpenVPN app under Advanced Settings there's a Legacy option but I'd recommend fixing your configuration instead if possible to use modern ciphers.