Today after almost 3 years of running openvpn server on debian it just stopped working. Although the status is running/active, not clients gets connection, rassbian, other debians, android, windows. Nothing works, yesterday they were all fine. I generated new user and it is still the same. On windows I get peer certificate verification failure. (Linux debianDELL 4.19.0-16-amd64 #1 SMP Debian 4.19.181-1 (2021-03-19) x86_64)
On android it gives:
TLS_Error:BIO read_tls_read_plaintext_error
TLS object-> incoming plaintext read error
TLS handshake failed
Is there any solution co check what is going on and what has happend? Could you please support?
Now I also see that the certificate has expired. Would you help?
Server on debian stopped working
-
- OpenVpn Newbie
- Posts: 7
- Joined: Sun Jan 14, 2018 7:27 pm
- openvpn_inc
- OpenVPN Inc.
- Posts: 1333
- Joined: Tue Feb 16, 2021 10:41 am
Re: Server on debian stopped working
Hello thedogg,
If this is OpenVPN Access Server, you should upgrade to the latest version and then download a new client connection profile. The Access Server will replace the expired CA with a new valid one, and a new connection profile will get a new valid certificate again.
If this is an open source OpenVPN implementation you'll have to make a new CA certificate and new client certificates, as it seems things have expired. You can check which ones exactly have expired and replace those.
Kind regards,
Johan
If this is OpenVPN Access Server, you should upgrade to the latest version and then download a new client connection profile. The Access Server will replace the expired CA with a new valid one, and a new connection profile will get a new valid certificate again.
If this is an open source OpenVPN implementation you'll have to make a new CA certificate and new client certificates, as it seems things have expired. You can check which ones exactly have expired and replace those.
Kind regards,
Johan
OpenVPN Inc.
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support