Hi, I've recently set up an OpenVPN AS server via the AWS marketplace. As per the docs I ran an [code]apt-get update[/code] and [code]apt-get uprade[/code]. I believe this upgraded the AS version to 2.11.0 I changed the Hostname of the server via the GUI and added a DNS entry for it, but when I try access it now I get: [code]You cannot visit your.vpn.site right now because the website uses HSTS. Network errors and attacks are usually temporary, so this page will probably work later.[/code] My question is: Is HSTS now enforced server side? The FAQ here says no https://openvpn.net/vpn-server-resources/#faqs second question down. Cheers!

[quote=openvpn_inc post_id=107422 time=1657297518 user_id=52935] may be registered at the online HSTS preload list. [/quote] Bingo, someone (who may not have been me) signed us up some time ago. Thank you very much Johan.

HSTS error accessing web portal

rokeeffe

Hi,

I've recently set up an OpenVPN AS server via the AWS marketplace. As per the docs I ran an

apt-get update

and

apt-get uprade

. I believe this upgraded the AS version to 2.11.0

I changed the Hostname of the server via the GUI and added a DNS entry for it, but when I try access it now I get:

You cannot visit your.vpn.site right now because the website uses HSTS. Network errors and attacks are usually temporary, so this page will probably work later.

My question is: Is HSTS now enforced server side? The FAQ here says no https://openvpn.net/vpn-server-resources/#faqs second question down.

Cheers!

openvpn_inc

Hi rokeeffe,

Access Server doesn't do HSTS by itself. It can be added though with a custom HTTP header. But the domain you are using may be registered at the online HSTS preload list. Try using another domain that isn't registered for HSTS. Or accessing it by IP address only.

See also; https://hstspreload.org/

Kind regards,
Johan

rokeeffe

openvpn_inc wrote may be registered at the online HSTS preload list.

Bingo, someone (who may not have been me) signed us up some time ago.

Thank you very much Johan.