Out of a sudden, establishing a connection is no longer possible #1452
-
General information
Description of the issueOn my Synology an OpenVPN server is running and this one is used to receive connection requests from different mobile phones. Log (if applicable)2022-02-03 20:25:07 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. OpenSSL legacy provider has been enabled --> nothing changed Is there anything I can do? Is anyone having similar issues? Thanks in advance, |
Beta Was this translation helpful? Give feedback.
Replies: 6 comments 13 replies
-
|
try using SHA512 instead RSA-SHA512. Looks like OpenSSL 3 removed some of the idiotic names. |
Beta Was this translation helpful? Give feedback.
-
|
@Fridolin34 there might be a bug in the app but I would need more details about that one. |
Beta Was this translation helpful? Give feedback.
-
|
@schwabe Hi Arne, what else do you need? I've checked the log, but I cannot really identify something useful. Either way, I've just added my log lines here: 2022-02-05 18:28:53 official build 0.7.33 running on samsung SM-G965F (exynos9810), Android 10 (QP1A.190711.020) API 29, ABI arm64-v8a, (samsung/star2ltexx/star2lte:10/QP1A.190711.020/G965FXXSHFUJ2:user/release-keys) |
Beta Was this translation helpful? Give feedback.
-
|
It is the RSA-SHA512 vs SHA512. Just replace the RSA-SHA512 with SHA512 in your config. |
Beta Was this translation helpful? Give feedback.
-
|
Sorry, not getting it. Yes, I've changed the configuration of the server and the client and then it worked. So it is not only cutting of the RSA- in the client config and it would work. The server has to be changed as well. But I have two VPN servers running and one of them is remotely placed. So it is slightly inconvenient for me to change that, because I would need to go there and change it, just to be able to connect to this server again. Basically, the server does not need to be changed, because another server is still perfectly connected to this remote VPN server. Therefore, why has the mobile application been changed and when is this going to be fixed? |
Beta Was this translation helpful? Give feedback.
-
|
Check also this: https://security.stackexchange.com/questions/91908/using-rsa-sha-as-instead-hmac-in-openvpn The OpenSSL version has been updated. The change was an update. And please complain on the OpenSSL upstream if you think that removing RSA-SHA512 alias is a bug. Just changing the client side should work though and you haven't posted a log that would suggest otherweise. |
Beta Was this translation helpful? Give feedback.
-
|
same i am using aes-256-cbc |
Beta Was this translation helpful? Give feedback.
-
|
@Deepanshusuman as --auth method? |
Beta Was this translation helpful? Give feedback.
-
|
Beta Was this translation helpful? Give feedback.
-
|
@Deepanshusuman can you post the log from the client? |
Beta Was this translation helpful? Give feedback.
-
|
Could not identify launch activity: Default Activity not found |
Beta Was this translation helpful? Give feedback.
-
|
you get that message when you click on the app icon in the launcher? You need to provide more details as I am not sure what is happening on your side as the "same" indicating you get the same error as the OP and now there is a compeltely different error mesage. |
Beta Was this translation helpful? Give feedback.
-
Beta Was this translation helpful? Give feedback.
-
|
That is a sucessful connection. |
Beta Was this translation helpful? Give feedback.
-
|
yes my bad it is a server side issue |
Beta Was this translation helpful? Give feedback.
try using SHA512 instead RSA-SHA512. Looks like OpenSSL 3 removed some of the idiotic names.