openvpn shows tls error when enabling hardware crypto engine ?

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
raghavkmr
OpenVpn Newbie
Posts: 6
Joined: Fri Nov 11, 2016 11:40 am

openvpn shows tls error when enabling hardware crypto engine ?

Post by raghavkmr » Fri Dec 29, 2017 10:50 am

Hi,
I am using openvpn 2.4.3
compiled with openssl 1.0.2l

When i connect a client with openvpn server without using hardware crypto ,it works perfectly fine
But if i enable crypto engine it doesn't connects showing tls error
when i read the log
i got following error
OCF asym process failed, Running in software
which i researched on the internet,it means openvpn cannot run hardware crypto ,back to using software
i got patches for solving this error (openvpn not working with hardware crypto engine enabled)
but they are for very old versions
https://community.openvpn.net/openvpn/ticket/480
should i apply the patch
How to resolve this issue

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: openvpn shows tls error when enabling hardware crypto engine ?

Post by TinCanTech » Fri Dec 29, 2017 2:20 pm

According to ticket #480 the patches in question were applied Mon Apr 27 16:28:57 2015 .. so the problem you are having is probably different.

Please see:
HOWTO: Request Help ! {2}

raghavkmr
OpenVpn Newbie
Posts: 6
Joined: Fri Nov 11, 2016 11:40 am

Re: openvpn shows tls error when enabling hardware crypto engine ?

Post by raghavkmr » Thu Jan 04, 2018 10:48 am

Is it because client has openssl 1.0.1 and server has 1.0.2l version

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: openvpn shows tls error when enabling hardware crypto engine ?

Post by TinCanTech » Thu Jan 04, 2018 2:56 pm

TinCanTech wrote:
Fri Dec 29, 2017 2:20 pm
Please see:
HOWTO: Request Help ! {2}

Post Reply