Anyone else sudeenly experiencing " connection timeout " ? It was fine until a few hours ago , but now no matter what configurations i try, i get the timeout in the openvpn app. It started happening after i saw the app reload/refresh (i dont know what you call it.. Like when the app icon has clock like animation for a few seconds ) on my home screen .

I also updated my app yesterday only to have my VPN stop working. I am using an OVPN generated by my Asus wireless router. The error I get from my OpenVPN on iOS is: Client exception in transport_recv_excode: PolarSSL: SSL read error : SSL - Processing of the ServerKeyExchange handshake message failed

I am getting "OpenVPN error:PolarSSL:error parsing cert certificate:X509 - The data tag or value is invalid" using OpenVPN Connect v 1.0.7 on iOS and v 1.1.17 on Android. When reverting to v 1.1.16 in Android all works without error. I am unable to re-install iOS v 1.0.6 This error only presents when using my commercial VPN provider Witopia. I can connect to my own OpenVPN servers without error. The release notes for iOS v 1.0.7 say "updated MbedTLS (formerly PolarSSL)" so maybe this is where the problem lies.

I too am getting connection timeouts with OpenVPN Connect 1.0.7. (I don't see any issues with SSL.) I have another iOS device still running 1.0.5, and it's still able to connect. Both devices are running iOS 9.3.2, and both devices have the same OpenVPN configuration.

Just noticed these two items in the release notes for the iOS version of OpenVPN Connect 1.0.7: [quote][list][*]The OpenVPN Setting "Force AES-CBC ciphersuites" is now off by default. If you experience connection issues with this change, you can easily turn it back on in the Settings App under OpenVPN. [*]Added "Minimum TLS version" setting. If you experience connection issues with this option, try setting it to "Disabled" in the Settings App under OpenVPN.[/list][/quote] For me, setting "Force AES-CBC ciphersuites" to on fixed my problem. Those of you with SSL issues might be interested in the second item above.

I tried forcing AES-CBC cipher suites on but it still did not work. I then deleted and reinstalled the app and re-imported my configuration. Now if you go to Settings--> OpenVPN, its blank!!!!!! Running iOS 9.3.2. Now not only can I not log in, I no longer have any settings!!! The previous version worked fine. HELP!!!!!!!!!!!!! The previous version worked JUST FINE!!!!!!!!!

I just performed a hard reboot on my iPhone and now I have OpenVPN settings, but I still cannot connect (PolarSSL: error parsing cert certificate : X509 - The date tag or value is invalid).

[quote="anthonyc17"]I just performed a hard reboot on my iPhone and now I have OpenVPN settings, but I still cannot connect (PolarSSL: error parsing cert certificate : X509 - The date tag or value is invalid).[/quote] Did you try setting "Minimum TLS version" to "Disabled?"

After upgrading to version 1.0.7 I am also no longer able to log on to my VPN. Server reports the following: [code]>LOG:1464852656,,80.187.100.154:13734 TLS: Initial packet from [AF_INET]XX.XX.XX.XX:YYYY, sid=46f01bde 1547da2c >LOG:1464852657,N,80.187.100.154:13734 TLS_ERROR: BIO read tls_read_plaintext error: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher >LOG:1464852657,N,80.187.100.154:13734 TLS Error: TLS object -> incoming plaintext read error >LOG:1464852657,N,80.187.100.154:13734 TLS Error: TLS handshake failed >LOG:1464852657,,80.187.100.154:13734 SIGUSR1[soft,tls-error] received, client-instance restarting[/code]

After adjusting the settings for the VPN Client software to force AES-CBC I am able to connect to the VPN server. But after the connection is established I am not able to access the network, because the server is puking lots of "Authenticate/Decrypt packet error: cipher final failed". I assume this is caused bay the following problem the server indicates: [code]>LOG:1464855940,W, ... WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher BF-CBC' >LOG:1464855940,W, ... WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128' [/code]

Unfortunately, I've tried many combinations of the above settings with absolutely no luck. I'm sure the problem, for me at least is the MbedTLS. And since I'm using an OpenVPN server imbedded in my router, I don't have many options that can be changed server side.

Can no longer connect today? "Connection timeout"

dangerusty

Same problem here, settings suggestions in app update text didn't help.

itsupport

still no answer from openvpn??

i have like 20+ ipads with this error, field guys can't enter their hours, jobs, etc...

THIS is causing work production outage.

anthonyc17

At this point, the lack of ANY acknowledgment or response from OpenVPN concerning this bug is OUTRAGEOUS!!!!!!!!!!!!!!!

djdrastic

Guys any update on this ? All my Android/IOS vpn remote users on Sophos XG firewall are down at the moment and is killing production.
Can we please get an app update or kb article written how to fix the "Date tag or value is invalid" ?

I have followed the steps in this thread but to no avail.

Thanks

jamesyonan

I would say that a major problem in fixing these issues is that almost no one bothers to submit enough detailed information that we can analyse the issue.

For example, if you are getting a mbedTLS/PolarSSL error that "Date tag or value is invalid", why don't you find the offending certificate or chain and post it or email it to ios@openvpn.net

This will allow us to understand if the issue is due to a bug in the mbedTLS/PolarSSL update, or whether the problem lies with the certificate.

James

djdrastic

Thanks James.
I've submitted my Firewall generated certificates and .ovpn files for inspection.

blinkingbee

I have submitted my certificates to help James fix the problem with iOS 1.0.7.
In the meantime I have managed to revert to iOS v1.0.5 on my iPhone by using the technique described here: http://www.idownloadblog.com/2015/12/25/how-to-download-older-versions-of-ios-apps/
WARNING: This is quite convoluted but well documented - see video.
Android reversion is much more straightforward.

jamesyonan

PolarSSL: error parsing cert certificate : X509 - The date tag or value is invalid [ERR]

Ok, thanks for submitting the certs, I was able to confirm that it's a problem with the certs themselves and not with mbedTLS/PolarSSL.

See my detailed response here:

https://forums.openvpn.net/viewtopic.php?f=36&t=21873

James

jokingaround

dangerusty wrote Same problem here, settings suggestions in app update text didn't help.

try installing app via https://cydiaimpactor.online cydia impactor guide.

« Previous Page