Hello,
I tried to make a OpenVPN server on my Synology DS218j with this tutorial
https://forum.synology.com/enu/viewtopic.php?f=173&t=143180#p531587 everything went good till I turned on a server. OpenVPN on my PC shows this error:
Sat Mar 7 19:58:17 2020 213.92.245.139:59407 TLS: Initial packet from [AF_INET]XXX.XX.XXX.XXX:XXXXX, sid=XXXXXXXX XXXXXXXX
Sat Mar 7 19:58:17 2020 213.92.245.139:59407 OpenSSL: error:140890C7:SSL routines:ssl3_get_client_certificate:peer did not return a certificate
Sat Mar 7 19:58:17 2020 213.92.245.139:59407 TLS_ERROR: BIO read tls_read_plaintext error
Sat Mar 7 19:58:17 2020 213.92.245.139:59407 TLS Error: TLS object -> incoming plaintext read error
Sat Mar 7 19:58:17 2020 213.92.245.139:59407 SYNO_ERR_CERT
Sat Mar 7 19:58:17 2020 213.92.245.139:59407 TLS Error: TLS handshake failed
Sat Mar 7 19:58:17 2020 213.92.245.139:59407 SIGUSR1[soft,tls-error] received, client-instance restarting
And i don't know what to do. There is my configurations files for /root/my-server.ovpn:
client
dev tun
proto udp
## Change me
remote xxxxxxxx.synology.me 1194
redirect-gateway def1
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
comp-lzo adaptive
auth-user-pass
key-direction 1
tls-version-min 1.2
cipher AES-256-CBC
auth SHA256
<ca>
-----BEGIN CERTIFICATE-----
XXX
-----END CERTIFICATE-----
</ca>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
xxx
-----END OpenVPN Static key V1-----
</tls-auth>
and my /usr/syno/etc/packages/VPNCenter/openvpn/openvpn.conf.user:
## Change me
push 192.168.0.0 255.255.255.0
push 10.8.0.0 255.255.255.0
## Change me if required
#push "dhcp-option DNS 192.168.0.1"
dev tun
management 127.0.0.1 1195
server 10.8.0.0 255.255.255.0
dh /usr/syno/etc/packages/VPNCenter/openvpn/mykeys/dh.pem
ca /usr/syno/etc/packages/VPNCenter/openvpn/mykeys/ca.crt
cert /usr/syno/etc/packages/VPNCenter/openvpn/mykeys/my-server-name.crt
key /usr/syno/etc/packages/VPNCenter/openvpn/mykeys/my-server-name.key
tls-auth /usr/syno/etc/packages/VPNCenter/openvpn/mykeys/ta.key 0
crl-verify /usr/syno/etc/packages/VPNCenter/openvpn/mykeys/crl.pem
## Broken
#user nobody
#group nobody
max-clients 5
comp-lzo adaptive
persist-tun
persist-key
keepalive 10 120
reneg-sec 0
plugin /var/packages/VPNCenter/target/lib/radiusplugin.so /var/packages/VPNCenter/target/etc/openvpn/radiusplugin.cnf
username-as-common-name
duplicate-cn
status /tmp/ovpn_status_2_result 30
status-version 2
log-append /var/log/openvpn.log
verb 3
mute 20
proto udp
## Change me
port 1194
tls-version-min 1.2
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256
cipher AES-256-CBC
auth SHA256
ohh and the logs I past there only error but when it was necessary i will past all of it
Sat Mar 7 19:58:17 2020 213.92.245.139:59407 TLS: Initial packet from [AF_INET]XXX.XX.XXX.XXX:XXXXX, sid=XXXXXXXX XXXXXXXX
Sat Mar 7 19:58:17 2020 213.92.245.139:59407 OpenSSL: error:140890C7:SSL routines:ssl3_get_client_certificate:peer did not return a certificate
Sat Mar 7 19:58:17 2020 213.92.245.139:59407 TLS_ERROR: BIO read tls_read_plaintext error
Sat Mar 7 19:58:17 2020 213.92.245.139:59407 TLS Error: TLS object -> incoming plaintext read error
Sat Mar 7 19:58:17 2020 213.92.245.139:59407 SYNO_ERR_CERT
Sat Mar 7 19:58:17 2020 213.92.245.139:59407 TLS Error: TLS handshake failed
Sat Mar 7 19:58:17 2020 213.92.245.139:59407 SIGUSR1[soft,tls-error] received, client-instance restarting
I completely don't know what to do with this. Anyone can solve this problem?
Thanks all for help.
