I picked up a Synology this morning and I've spent the day uploading data, playing with iSCSI and a few of the other cool features including OpenVPN & Android.
I've used the 'OpenVPN for Android' app by Arne Schwabe with my PC previously so I've adapted that to work with my Synology.
https://play.google.com/store/apps/details?id=de.blinkt.openvpn as it's free, opensource and
doesn't require root, but does need ICS/JellyBean.
What phone and Android version are you trying?
Anyway, this is essentially what I did to migrate the OpenVPN I had running on my PC over to my Synology with a number of tweaks, as follows:
1) Create a user that exactly matches the CN of your client cert. e.g. AndroidPHONE (it's case sensitive)
2) enable ssh on the Synology if you don't have it already
3) Create a new dir /var/packages/VPNCenter/target/etc/openvpn/mykeys/[*]Copy in ca.crt, dh1024.pem, server.crt and server.key
4) Edit the /usr/syno/etc/packages/VPNCenter/openvpn/openvpn.conf file and change the following:
- comment out the #client-cert-not-required option (We want to use a client cert!)
- the locations of the files from /var/packages/VPNCenter/target/etc/openvpn/keys/ to /var/packages/VPNCenter/target/etc/openvpn/mykeys/
5) set the OpenVPN client to use a user/PW + Android
6) Make sure the 'use default route' is turned off in the routing section, unless you want all your traffic to go
via your Synology.
The trickiest part is getting the certs to work on Android as you'll need to convert to them to a .pem file, which requires openSSL.