Getting error on "data-ciphers" line on OVPN client

PCOL IT Admin

Hi all,

Trying to set up an OpenVPN connection on pfSense 2.4.5-RELEASE-p1. I am using the SSL-TLS+user auth method. I have a Apple Macbook with Tunnelblick 3.8.4 (build 5600), where I have imported the .ovpn config file generated from the pfSense OpenVPN client conf exporter plugin.

When I try connecting, it fails, with this error:

1606165530.305305 b000 Options error: Unrecognized option or missing or extra parameter(s) in /Library/Application Support/Tunnelblick/Users/will/pcol-gw-wdennis.tblk/Contents/Resources/config.ovpn:4: data-ciphers (2.4.9)

I have set the NCP Algorithms on the pSense server to include all of the AES-* algo's. The data-ciphers* lines in the client config are:

data-ciphers AES-128-CFB1:AES-128-CFB8:AES-128-OFB:AES-192-CBC:AES-192-CFB:AES-192-CFB1:AES-192-CFB8:AES-192-OFB:AES-256-CBC:AES-256-CFB:AES-256-CFB1:AES-256-CFB8:AES-256-OFB
data-ciphers-fallback AES-128-CBC

Thanks for any help or info you can provide.

TinCanTech

Your client needs Openvpn version 2.5

PCOL IT Admin

Yes, that worked - had to upgrade to beta version of T'blick (3.8.5beta01 build 5610) but after setting it to use OpenVPN 2.5, it now connects. Thanks!