New client no connection with openvpn server

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
Diabollo
OpenVpn Newbie
Posts: 3
Joined: Sat May 07, 2022 7:54 pm

New client no connection with openvpn server

Post by Diabollo » Sun May 08, 2022 10:10 am

Hi,
currently I'm using a openvpn server 2.3.4. with a openvpn client 2.4.0 on the Cubietruck with Armbian Linux 4.19.62. Everything is working well. I would like to replace the Cubietruck with a Rasberry Pi 4. An openvpn 2.4.7 is running on the Rasberry Pi with rasberrypi 5.10.103. Unfortunately, I can't get a connection to the server with the files from the Cubietruck. Where is the issue? Is this a version conflict?

Code: Select all

May 8 11:40:58 raspberrypi ovpn-client[2391]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
May 8 11:40:58 raspberrypi ovpn-client[2391]: TCP/UDP: Preserving recently used remote address: [AF_INET]1.1.1.1:123
May 8 11:40:58 raspberrypi ovpn-client[2391]: Socket Buffers: R=[180224->180224] S=[180224->180224]
May 8 11:40:58 raspberrypi ovpn-client[2391]: UDP link local: (not bound)
May 8 11:40:58 raspberrypi ovpn-client[2391]: UDP link remote: [AF_INET]1.1.1.1:123
May 8 11:40:58 raspberrypi ovpn-client[2391]: TLS: Initial packet from [AF_INET]1.1.1.1:123, sid=3a17e7fa 062245af
May 8 11:40:58 raspberrypi ovpn-client[2391]: TLS error: Unsupported protocol. This typically indicates that client and server have no common TLS version enabled. This can be caused by mismatched tls-version-min and tls-version-max options on client and server. If your OpenVPN client is between v2.3.6 and v2.3.2 try adding tls-version-min 1.0 to the client configuration to use TLS 1.0+ instead of TLS 1.0 only
May 8 11:40:58 raspberrypi ovpn-client[2391]: OpenSSL: error:1435F302:SSL routines:ssl_choose_client_version:unsupported protocol
May 8 11:40:58 raspberrypi ovpn-client[2391]: TLS_ERROR: BIO read tls_read_plaintext error
May 8 11:40:58 raspberrypi ovpn-client[2391]: TLS Error: TLS object -> incoming plaintext read error
May 8 11:40:58 raspberrypi ovpn-client[2391]: TLS Error: TLS handshake failed
May 8 11:40:58 raspberrypi ovpn-client[2391]: SIGUSR1[soft,tls-error] received, process restarting
May 8 11:40:58 raspberrypi ovpn-client[2391]: Restart pause, 20 second(s)

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: New client no connection with openvpn server

Post by TinCanTech » Sun May 08, 2022 11:42 am

Diabollo wrote:
Sun May 08, 2022 10:10 am
TLS error: Unsupported protocol. This typically indicates that client and server have no common TLS version enabled. This can be caused by mismatched tls-version-min and tls-version-max options on client and server. If your OpenVPN client is between v2.3.6 and v2.3.2 try adding tls-version-min 1.0 to the client configuration to use TLS 1.0+ instead of TLS 1.0 only
Proof that nobody reads their logs.

Diabollo
OpenVpn Newbie
Posts: 3
Joined: Sat May 07, 2022 7:54 pm

Re: New client no connection with openvpn server

Post by Diabollo » Sun May 08, 2022 12:06 pm

I did read it but no understand the issue.

Diabollo
OpenVpn Newbie
Posts: 3
Joined: Sat May 07, 2022 7:54 pm

Re: New client no connection with openvpn server

Post by Diabollo » Sun May 08, 2022 1:06 pm

tls-vesrion-min 1.0 in the client config file solved this issue. :)

Post Reply