OpenVPN says incorrect password for (correct) saved password

raako71

I am connecting to an OpenVPN server hosted on a Synology NAS. Sometimes when I connect to the server I will get an incorrect password popup, even though the password is saved (and correct). In the OpenVPN window, I am getting a warning that 'No server certificate verification method has been enabled' (a limitation with the Synology NAS). Is this anything to worry about?
As here:

TinCanTech

Your NAS is clearly old and in need of updating or replacing ..

raako71

no this is current Synology OpenVPN offering.. May have to look at a different solution...

TinCanTech

raako71 wrote I am getting a warning that 'No server certificate verification method has been enabled' (a limitation with the Synology NAS). Is this anything to worry about?

Yes.

TinCanTech wrote Your NAS is clearly old and in need of updating or replacing

raako71 wrote no this is current Synology OpenVPN offering..

Prove it.

raako71 wrote May have to look at a different solution...

Go nuts ..

raako71

why should I prove it?

TinCanTech wrote Yes.

Do you know why? Can you explain it? Compromised MITM I assume

TinCanTech

TinCanTech wrote
TinCanTech wrote Your NAS is clearly old and in need of updating or replacing
raako71 wrote no this is current Synology OpenVPN offering..
Prove it.

raako71 wrote why should I prove it?

It is standard practice, that is why everything has a version/serial number.

300000

what about buy a newest Synology NAS so it have newest openvpn install maybe it is more security than the old one.if i was you I would reformat Synology NAS and install all again from new so it will clear everything left .at the moment Synology NAS still working so nothing need to be changed

the warning come from not checking server certificate attribute , if you add this line into client config the warning will go.

"remote-cert-eku "TLS Web Server Authentication"

but you know scareware if certificate you create dont have that "TLS Web Server Authentication" so you cant add that into your config either because it is not going to work for you.

nothing wrong with warning either . that warning come from EasyRAS so there is no way to fix it but dont use EasyRAS to create certificate and use XCA or windows certificate to create certificate so that warning will go.

if you want to use EasyRAS you need to open openssl.conf and adding attribute "TLS Web Server Authentication' into create so the warning will go .

Pippin

Synology NAS (and their routers) use version 2.3.11 and some older models even worse.
Mine is from 2014 and has 2.3.11

But I bootstrapped it using Easy Bootstrap Installer and IpkGui (cphub.net).
Using Entware gives access to these packages:
http://bin.entware.net/armv7sf-k3.2/
My nas is armv7.

Edit: Wrong link

bonomo80

I got the same issues in saved password https://www.imessageapp.biz/

Mazzone78

I'm also finding the same solution. If I found any solution then I'll let you know.