OpenVPN says incorrect password for (correct) saved password

[raako71]

I am connecting to an OpenVPN server hosted on a Synology NAS. Sometimes when I connect to the server I will get an incorrect password popup, even though the password is saved (and correct). In the OpenVPN window, I am getting a warning that 'No server certificate verification method has been enabled' (a limitation with the Synology NAS). Is this anything to worry about?
As here:

[TinCanTech]

Your NAS is clearly old and in need of updating or replacing ..

[raako71]

no this is current Synology OpenVPN offering.. May have to look at a different solution...

[TinCanTech]

I am getting a warning that 'No server certificate verification method has been enabled' (a limitation with the Synology NAS). Is this anything to worry about?

Yes.

Your NAS is clearly old and in need of updating or replacing

no this is current Synology OpenVPN offering..

Prove it.

May have to look at a different solution...

Go nuts ..

[raako71]

why should I prove it?

Yes.

Do you know why? Can you explain it? Compromised MITM I assume

[TinCanTech]

Your NAS is clearly old and in need of updating or replacing

no this is current Synology OpenVPN offering..

Prove it.

why should I prove it?

It is standard practice, that is why everything has a version/serial number.

[300000]

what about buy a newest Synology NAS so it have newest openvpn install maybe it is more security than the old one.if i was you I would reformat Synology NAS and install all again from new so it will clear everything left .at the moment Synology NAS still working so nothing need to be changed

the warning come from not checking server certificate attribute , if you add this line into client config the warning will go.

"remote-cert-eku "TLS Web Server Authentication"

but you know scareware if certificate you create dont have that "TLS Web Server Authentication" so you cant add that into your config either because it is not going to work for you.

nothing wrong with warning either . that warning come from EasyRAS so there is no way to fix it but dont use EasyRAS to create certificate and use XCA or windows certificate to create certificate so that warning will go.

if you want to use EasyRAS you need to open openssl.conf and adding attribute "TLS Web Server Authentication' into create so the warning will go .

[Pippin]

Synology NAS (and their routers) use version 2.3.11 and some older models even worse.
Mine is from 2014 and has 2.3.11

But I bootstrapped it using Easy Bootstrap Installer and IpkGui (cphub.net).
Using Entware gives access to these packages:
http://bin.entware.net/armv7sf-k3.2/
My nas is armv7.

Edit: Wrong link

[Mazzone78]

I'm also finding the same solution. If I found any solution then I'll let you know.