OpenVPN client error : Failed to configure TLS context

[deleted]

Hello,

I am trying to set openVpn client on a customized ARM linux platform (armv7l GNU/Linux)

openVPN client version:  2.3.14 arm-poky-linux-gnueabi

I got this errors when trying to start my openvpn client:

Tue Nov 28 15:28:03 2017 us=942328 OpenVPN 2.3.14 arm-poky-linux-gnueabi [SSL] [LZO] [EPOLL] [MH] [IPv6] built on Sep  6 2017
Tue Nov 28 15:28:03 2017 us=942837 library versions: LibreSSL 2.5.0, LZO 2.09
Tue Nov 28 15:28:03 2017 us=943095 WARNING: file '/etc/openvpn/auth.txt' is group or others accessible
Tue Nov 28 15:28:03 2017 us=951558 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Nov 28 15:28:03 2017 us=951835 PO_INIT maxevents=4 flags=0x00000002
Tue Nov 28 15:28:04 2017 us=452047 Failed to configure TLS context
Tue Nov 28 15:28:04 2017 us=452305 Exiting due to fatal error

It is not a firewall issue since I deactivated to be sure.
I used the same configuration on another ARM client and it is working.
The server side is not using this openVPN server implementation, it is just implementing the openVPN protocol. And I could'nt extract its configuration, I can just export the client configuration that I need to put on my client side.

Here is the config file:

dev tun
tls-client
remote myRemoteIP 1194
pull
proto udp
script-security 2
ca /etc/openvpn/ca.crt
comp-lzo
reneg-sec 0
cipher AES-256-CBC
auth SHA1
auth-user-pass /etc/openvpn/auth.txt
log-append /var/log/openvpn.log
verb 9

any ideas what is going wrong? thanks

TinCanTech

Please see:
HOWTO: Request Help !

sabrina_2020 wrote Tue Nov 28 15:28:04 2017 us=452047 Failed to configure TLS context
Tue Nov 28 15:28:04 2017 us=452305 Exiting due to fatal error

This is something to do with LibreSSL .. where did you download OpenVPN from ?

[deleted]

It was installed by default on my gateway the versions are the following:

openvpn --version
OpenVPN 2.3.14 arm-poky-linux-gnueabi [SSL] [LZO] [EPOLL] [MH] [IPv6] built on Sep  6 2017
library versions: LibreSSL 2.5.0, LZO 2.09
Originally developed by James Yonan
Copyright (C) 2002-2016 OpenVPN Technologies, Inc. <sales@openvpn.net>

openssl version
OpenSSL 1.0.2j  26 Sep 2016

So the problem is that openvpn is using LibreSSL? how can I fix that?
I have also openSSL installed, can I specify to openvpn to use openSSL?

Thanks,
Best

TinCanTech

sabrina_2020 wrote I am trying to set openVpn client on a customized ARM linux platform (armv7l GNU/Linux)

sabrina_2020 wrote It was installed by default on my gateway the versions are the following:

openvpn --version
OpenVPN 2.3.14 arm-poky-linux-gnueabi [SSL] [LZO] [EPOLL] [MH] [IPv6] built on Sep  6 2017
library versions: LibreSSL 2.5.0, LZO 2.09

OpenVPN.net does not provide OpenVPN with LibreSSL, that has been done by your supplier. Please take your question to whoever it is that supplies your device.

amze

Hello.
I have a similar issue, when I run openvpng --config client.ovpn
I got the error message:

===
OpenVPN 2.4.3 arm-poky-linux-gnueabi [SSL] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jan 28 2020
library versions: LibreSSL 2.5.0, LZO 2.10
Failed to configure TLS context
2020 Exiting due to fatal error
===

ANY HELP PLEASE ?

The vpn server version is:

===
OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2019
library versions: OpenSSL 1.1.1  11 Sep 2018, LZO 2.08
Originally developed by James Yonan
Copyright (C) 2002-2017 OpenVPN Technologies, Inc. <sales@openvpn.net>
Compile time defines: enable_async_push=no enable_comp_stub=no enable_crypto=yes enable_crypto_ofb_cfb=yes enable_debug=yes enable_def_auth=yes enable_dependency_tracking=no enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=needless enable_fragment=yes enable_iproute2=yes enable_libtool_lock=yes enable_lz4=yes enable_lzo=yes enable_maintainer_mode=no enable_management=yes enable_multihome=yes enable_pam_dlopen=no enable_pedantic=no enable_pf=yes enable_pkcs11=yes enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_silent_rules=no enable_small=no enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=yes enable_werror=no enable_win32_dll=yes enable_x509_alt_username=yes with_aix_soname=aix with_crypto_library=openssl with_gnu_ld=yes with_mem_check=no with_sysroot=no
===

the vpn client version is:

===
OpenVPN 2.4.3 arm-poky-linux-gnueabi [SSL] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jan 28 2020
library versions: LibreSSL 2.5.0, LZO 2.10
Originally developed by James Yonan
Copyright (C) 2002-2017 OpenVPN Technologies, Inc. <sales@openvpn.net>
Compile time defines: enable_async_push=no enable_comp_stub=no enable_crypto=yes enable_crypto_ofb_cfb=yes enable_debug=yes enable_def_auth=yes enable_dependency_tracking=no enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=yes enable_fragment=yes enable_iproute2=yes enable_libtool_lock=yes enable_lz4=yes enable_lzo=yes enable_management=yes enable_multi=yes enable_multihome=yes enable_pam_dlopen=no enable_pedantic=no enable_pf=yes enable_pkcs11=no enable_plugin_auth_pam=no enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_silent_rules=no enable_small=no enable_static=no enable_strict=no enable_strict_options=no enable_systemd=no enable_werror=no enable_win32_dll=yes enable_x509_alt_username=no with_aix_soname=aix with_broken_putenv=no with_crypto_library=pncssl with_gnu_ld=yes with_libtool_sysroot=/home/gitlab-runner/builds/21b01cd8/0/cgs/klk-basestation-bsp/build/tmp/work/armv7ahf-neon-poky-linux-gnueabi/openvpn/2.4.3-r0/recipe-sysroot with_mem_check=no
===