Hi guys
Sorry if this is in the wrong forum.
Hello
I am having a strange problem with my openvpn connection. It connects fine via my android phone, but if I try it on a computer I get authentication issues.
I am using an Asus RT66U router which has an openvpn installation on it. It has the latest firmware.
I have exported the .opvn file on both the laptop and the android phone. It also works on my ipad.
The log is as below:
============================================================
*Tunnelblick: OS X 10.6.8; Tunnelblick 3.5.5 (build 4270.4461); Admin user
Configuration client
"Sanitized" condensed configuration file for /Users/franciner/Library/Application Support/Tunnelblick/Configurations/client.tblk:
client
dev tun
proto tcp-client
remote xxx.xxx.xxx.xxx 443
float
cipher AES-128-CBC
comp-lzo adaptive
keepalive 15 60
auth-user-pass
ns-cert-type server
<ca>
[Security-related line(s) omitted]
</ca>
<cert>
[Security-related line(s) omitted]
</cert>
<key>
[Security-related line(s) omitted]
</key>
resolv-retry infinite
nobind
2015-12-26 12:26:48 *Tunnelblick: openvpnstart starting OpenVPN
2015-12-26 12:26:49 OpenVPN 2.3.6 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Dec 4 2015
2015-12-26 12:26:49 library versions: OpenSSL 1.0.1q 3 Dec 2015, LZO 2.08
2015-12-26 12:26:51 *Tunnelblick: Established communication with OpenVPN
2015-12-26 12:26:59 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2015-12-26 12:26:59 Attempting to establish TCP connection with [AF_INET]xxx.xxx.xxx.xxx:443 [nonblock]
2015-12-26 12:27:00 TCP connection established with [AF_INET]xxx.xxx.xxx.xxx:443
2015-12-26 12:27:00 TCPv4_CLIENT link local: [undef]
2015-12-26 12:27:00 TCPv4_CLIENT link remote: [AF_INET]xxx.xxx.xxx.xxx:443
2015-12-26 12:27:00 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2015-12-26 12:27:00 TLS_ERROR: BIO read tls_read_plaintext error: error:14082174:SSL routines:SSL3_CHECK_CERT_AND_ALGORITHM:dh key too small
2015-12-26 12:27:00 TLS Error: TLS object -> incoming plaintext read error
2015-12-26 12:27:00 TLS Error: TLS handshake failed
2015-12-26 12:27:00 Fatal TLS error (check_tls_errors_co), restarting
2015-12-26 12:27:00 SIGUSR1[soft,tls-error] received, process restarting
===============================================================
It then loops and loops and doesn't get anywhere.
The log from my android phone is as follows:
OpenVPN Start
EVENT: CORE_THREAD_ACTIVE
UNUSED OPTIONS
13 [resolv-retry] [infinite]
14 [nobind]
EVENT:RESOLVE
Contacting xxx.xxx.xxx.xxx:443 via TCP
EVENT:WAIT
Connecting to xxx.xxx.xxx.xxx:443 via TCPv4
EVENT:CONNECTING
Tunnel Options:V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client
Creds: Username/Password
Peer Info:
IV_GUI_VER=net.openvpn.connect.android 1.1.16-74
IV_VER=3.0.3
IV_PLAT=android
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_LZO=1
VERIFY OK: depth=1
cert. version :3
serial number : B2:AC:17:01:1F:29:25:FD
issuer name : C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-N66U, emailAddress=
me@myhost.mydomain
subject name : C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-N66U, emailAddress=
me@myhost.mydomain
issued on :2014-02-27 21:29:17
expires on :2014-02-27 21:29:17
signed using :RSA with SHA1
RSA key size :1024 bits
basic constraints :CA=false
cert. type : SSL Server
key usage : Digital Signature, Key Encipherment
ext key usage : TLS Web Server Authentication
SSL Handshake: TLSv1.0/TLS-DHE-RSA-WITH-AES-256-CBC-SHA
Session is ACTIVE
EVENT: GET_CONFIG
Sending PUSH_REQUEST to server....
OPTIONS:
0[route][10.10.10.0][255.255.255.0]
1[redirect-gateway][def1]
2[route][10.8.0.1]
3[topology][net30]
4[ping][15]
5[ping-restart][60]
6[ifconfig][10.8.0.6][10.8.0.5]
LZO_ASYM init swap=0 asym=0
EVENT: ASSIGN_IP
Google DNS fallback enabled
Connect via tun
EVENT:CONNECTED
info='
xxxxx@xxx.xxx.xxx.xxx:443 via / TCPv4 on tun/10.8.06/' trans=TO_CONNECTED
================================================
I do not understand why it works for my devices but not when I install the openvpn client on pcs.
I auto generated the certificate via the ASUS web interface, so not sure if that has had an impact.
Any help you can provide would be great. Happy to put this in a forum if there is a suitable place I can post this.
Kind regards,
Will
