Transport Error

[farhaadn]

Hi, I use MikroTik OS as a openvpn server and openvpn connect version 3.2.3(1851) as client on windows
I got below error:

Code: Select all

7/26/2021, 9:00:06 PM OpenVPN core 3.git::58b92569 win x86_64 64-bit built on Feb 10 2021 15:20:23
⏎7/26/2021, 9:00:06 PM Frame=512/2048/512 mssfix-ctrl=1250
⏎7/26/2021, 9:00:06 PM UNUSED OPTIONS
4 [resolv-retry] [infinite] 
5 [nobind] 
6 [persist-key] 
7 [persist-tun] 
15 [verb] [4] 
⏎7/26/2021, 9:00:06 PM WinCommandAgent: transmitting bypass route to 172.16.4.8
{
	"host" : "172.16.4.8",
	"ipv6" : false
}

⏎7/26/2021, 9:00:06 PM Connecting to [172.16.4.8]:1194 (172.16.4.8) via TCPv4
⏎7/26/2021, 9:00:06 PM Tunnel Options:V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_CLIENT,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client
⏎7/26/2021, 9:00:06 PM Creds: Username/Password
⏎7/26/2021, 9:00:06 PM Peer Info:
IV_VER=3.git::58b92569
IV_PLAT=win
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_GUI_VER=OCWindows_3.2.3-1851
IV_SSO=openurl

⏎7/26/2021, 9:00:06 PM Transport Error: OpenSSLContext::SSL::read_cleartext: BIO_read failed, cap=2576 status=-1: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
⏎7/26/2021, 9:00:06 PM EVENT: RESOLVE ⏎7/26/2021, 9:00:06 PM EVENT: WAIT ⏎7/26/2021, 9:00:06 PM EVENT: CONNECTING ⏎7/26/2021, 9:00:06 PM EVENT: CERT_VERIFY_FAIL OpenSSLContext::SSL::read_cleartext: BIO_read failed, cap=2576 status=-1: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed⏎7/26/2021, 9:00:06 PM EVENT: DISCONNECTED ⏎

[TinCanTech]

Mikrotik routers aren't very good and yours has probably generated a poor quality certificate which has: "certificate verify failed"

Probably, you need to upgrade your Mikrotik router firmware.

[300000]

SSL routines:tls_process_server_certificate:certificate verify failed

this is something wrong with certificate. do you use changed something or update new one with difference certificate , just double check it first. make sure update time on router and client too. how do you create client and this is the first time you try to connect or you done it before?.