client.openvpn.net Certificate Problem

Business solution to host your own OpenVPN server with web management interface and bundled clients.
Post Reply
twilley
OpenVpn Newbie
Posts: 1
Joined: Thu Sep 14, 2017 8:40 pm

client.openvpn.net Certificate Problem

Post by twilley » Thu Sep 14, 2017 9:18 pm

Hello,

I'm noticing that on the login page, a request is made to https://client.openvpn.net:946/detect.p ... =timestamp. However on recent versions of Chrome (58+), this is blocked because the Certificate in use by that server does not have a Subject Alternative Name. See https://productforums.google.com/forum/ ... 19ZxwjaCjw and https://www.chromestatus.com/features/4981025180483584 for some context.

When attempting to browse directly to the URL, Chrome presents the following error message:
Your connection is not private

Attackers might be trying to steal your information from client.openvpn.net (for example, passwords, messages, or credit cards).

NET::ERR_CERT_COMMON_NAME_INVALID

Clicking "Advanced" adds the following message:
This server could not prove that it is client.openvpn.net; its security certificate does not specify Subject Alternative Names. This may be caused by a misconfiguration or an attacker intercepting your connection.

User avatar
novaflash
OpenVPN Inc.
Posts: 1073
Joined: Fri Apr 13, 2012 8:43 pm

Re: client.openvpn.net Certificate Problem

Post by novaflash » Fri Sep 15, 2017 7:01 am

It's unfortunately a known problem caused by browsers changing the way certificates are accepted. It's being worked by basically changing everything about how the communication between client and server works. In the meantime, just use the tray icon to make a connection.
I'm still alive, just posting under the openvpn_inc alias now as part of a larger group.

victor.hhdez.g
OpenVpn Newbie
Posts: 1
Joined: Fri Jan 05, 2018 7:11 pm

Re: client.openvpn.net Certificate Problem

Post by victor.hhdez.g » Fri Jan 05, 2018 7:12 pm

Hello,

I Have the same problem. Do you have any update about this?

User avatar
novaflash
OpenVPN Inc.
Posts: 1073
Joined: Fri Apr 13, 2012 8:43 pm

Re: client.openvpn.net Certificate Problem

Post by novaflash » Fri Jan 05, 2018 10:00 pm

Only that a LOT of work has been done to rewrite code that needs to be rewritten. This is not a simple job. It spans all the client software, and a lot of components in the server. This is going to take time.
I'm still alive, just posting under the openvpn_inc alias now as part of a larger group.

Post Reply