Jump to content


Turbo

Member Since 11 Oct 2019
Offline Last Active 01 Nov 2019 13:01
-----

Topics I've Started

Is there a reason why you have so old openvpn versions in opkg and Why I cant build it...

30 October 2019 - 10:11

I am to be honest a little pissed of because you have still the openvpn version 2.3.9 in opkg. With this version you cant do anything right.

The .ovpn you create with the newest version on your server arent working good and for the security perspective its more than a mess to use so old versions. So i tried to build openvpn from source (the newest version ofc) and figured out that this is not even possible because I cant get

libssl-dev liblzo2-dev libpam0g-dev build-essential

if you know a way pls tell me ;D

 

I want to ask now:

1) Why didnt you updated the openvpn versions in opkg

2) Do you know another way to use openvpn

3) Do you use .ovpn files for your clients? Or do you handle it differently?

 

Have a nice Day

 

Turbo


OpenPli 7.2 and OpenVPN TLS Error (TLS Version)

11 October 2019 - 21:09

Hello there. 

 

I have a OpenVPN server (newest OpenVpn version) and I have problems to connect to it with my OpenPli 7.2 

 

I wrote a config for the client and saved it on my Reciever. When I type openvpn --config /home/configForReciever.ovpn 

 

It starts openVpn and gets TLS ERROR like this: 

Thu Jan  1 01:26:26 1970 TLS_ERROR: BIO read tls_read_plaintext error
Thu Jan  1 01:26:26 1970 TLS Error: TLS object -> incoming plaintext read error
Thu Jan  1 01:26:26 1970 TLS Error: TLS handshake failed
Thu Jan  1 01:26:26 1970 SIGUSR1[soft,tls-error] received, process restarting
Thu Jan  1 01:26:26 1970 Restart pause, 5 second(s)
 

 

I am sure it is a TLS Version Conflict and so I tried to edit the openssl.conf  As in Debian  you just need to change the TLS version but I cant find this line on my conf. So Now I dont know rly what to do.. Both OpenVPN versions are the newest versions. 

 

[system_default_sect]

MinProtocol = TLSv1.2
CipherString = DEFAULT@SECLEVEL=2

 

 

Editing the ovpn file didnt helped.. I tried adding : tls-version-min 1.0