OpenVPN GUI 2.3.10 is work fine,When i update to 2.4.7,is can't connect to openvpn server
CA is Create by RouterBOARD
ovpn-server config
enabled: yes
port: 1194
mode: ip
netmask: 24
mac-address: FE:7E:41:06:67:CD
max-mtu: 1500
keepalive-timeout: 60
default-profile: opvn
certificate: myCa
require-client-certificate: yes
auth: sha1,md5,null
cipher: blowfish128,aes128,null
client.ovpn
client
dev tun
proto tcp
remote 192.168.0.1 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
;remote-cert-tls server
auth-user-pass
cipher AES-256-CBC
verb 3
OpenVPN GUI Log:
Fri Jun 07 10:10:58 2019 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Jun 07 10:10:58 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]192.168.0.1:1194
Fri Jun 07 10:10:58 2019 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Jun 07 10:10:58 2019 Attempting to establish TCP connection with [AF_INET]192.168.0.1:1194 [nonblock]
Fri Jun 07 10:10:58 2019 MANAGEMENT: >STATE:1559873458,TCP_CONNECT,,,,,,
Fri Jun 07 10:10:59 2019 TCP connection established with [AF_INET]192.168.0.1:1194
Fri Jun 07 10:10:59 2019 TCP_CLIENT link local: (not bound)
Fri Jun 07 10:10:59 2019 TCP_CLIENT link remote: [AF_INET]192.168.0.1:1194
Fri Jun 07 10:10:59 2019 MANAGEMENT: >STATE:1559873459,WAIT,,,,,,
Fri Jun 07 10:10:59 2019 MANAGEMENT: >STATE:1559873459,AUTH,,,,,,
Fri Jun 07 10:10:59 2019 TLS: Initial packet from [AF_INET]192.168.0.1:1194, sid=e595d8e8 c2feb850
Fri Jun 07 10:10:59 2019 VERIFY ERROR: depth=0, error=self signed certificate: CN=myCa
Fri Jun 07 10:10:59 2019 OpenSSL: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
Fri Jun 07 10:10:59 2019 TLS_ERROR: BIO read tls_read_plaintext error
Fri Jun 07 10:10:59 2019 TLS Error: TLS object -> incoming plaintext read error
Fri Jun 07 10:10:59 2019 TLS Error: TLS handshake failed
Fri Jun 07 10:10:59 2019 Fatal TLS error (check_tls_errors_co), restarting
Fri Jun 07 10:10:59 2019 SIGUSR1[soft,tls-error] received, process restarting
Fri Jun 07 10:10:59 2019 MANAGEMENT: >STATE:1559873459,RECONNECTING,tls-error,,,,,
Fri Jun 07 10:10:59 2019 Restart pause, 5 second(s)
Router Log:
Jun/07/2019 10:11:44 ovpn,info TCP connection established from 192.168.0.8
Jun/07/2019 10:11:44 ovpn,debug,packet sent P_CONTROL_HARD_RESET_SERVER_V2 kid=0 sid=e595d8e8c2feb850 pid=0 DATA len=0
Jun/07/2019 10:11:45 ovpn,debug,packet rcvd P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=46fc905acdeee429 pid=0 DATA len=0
Jun/07/2019 10:11:45 ovpn,debug,packet sent P_ACK kid=0 sid=e595d8e8c2feb850 [0 sid=46fc905acdeee429] DATA len=0
Jun/07/2019 10:11:45 ovpn,debug,packet rcvd P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=46fc905acdeee429 [0 sid=e595d8e8c2feb850] pid=0 DATA len=0
Jun/07/2019 10:11:45 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,warning duplicate packet, dropping
Jun/07/2019 10:11:45 ovpn,debug,packet rcvd P_CONTROL kid=0 sid=46fc905acdeee429 pid=1 DATA len=160
Jun/07/2019 10:11:45 ovpn,debug,packet sent P_ACK kid=0 sid=e595d8e8c2feb850 [1 sid=46fc905acdeee429] DATA len=0
Jun/07/2019 10:11:46 ovpn,debug,packet sent P_CONTROL kid=0 sid=e595d8e8c2feb850 pid=1 DATA len=1400
Jun/07/2019 10:11:46 ovpn,debug,packet sent P_CONTROL kid=0 sid=e595d8e8c2feb850 pid=2 DATA len=376
Jun/07/2019 10:11:46 ovpn,debug <192.168.0.8>: disconnected <peer disconnected>