OpenVPN Connect 3 iOS crash and not working anymore

[newi]

Hi,

I've updated the OpenVPN Connect iOS app on 4 devices to version 3 and I'm having issues.

VPN won't connect anymore and once I import my ovpn profile and try to connect, the app crashes. There is no way to open the app even after force killing the app and rebooting the phone. I need to uninstall and reinstall.

I'm using iPhone 6s, iPhone 7 with iOS 11.4.1.
The server is running on a Ubquiti EdgeRouter X.

The same profile with OpenVPN 1.2.9 or on a PC/Mac laptops works flawlessly.

Here's the client config file:

Code: Select all

client
dev tun
proto tcp
remote vpnhost 443
float
resolv-retry infinite 
nobind
persist-key
persist-tun
remote-cert-tls server
verb 3
auth sha256
cipher aes-256-cbc
key-direction 1
<ca>
-----BEGIN CERTIFICATE-----
ccc
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
ccc
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN RSA PRIVATE KEY-----
ccc
-----END RSA PRIVATE KEY-----
</key>
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
ccc
-----END OpenVPN Static key V1-----
</tls-auth>

Here's the OpenVPN Connect log when I try to connect. It looks incomplete and I don't see any errors...

Code: Select all

2018-19-29 21:19:51 1

2018-19-29 21:19:51 ----- OpenVPN Start -----
OpenVPN core 3.2 ios arm64 64-bit PT_PROXY built on Aug 17 2018 09:49:39

2018-19-29 21:19:51 Frame=512/2048/512 mssfix-ctrl=1250

2018-19-29 21:19:51 UNUSED OPTIONS
5 [resolv-retry] [infinite] 
6 [nobind] 
7 [persist-key] 
8 [persist-tun] 
10 [verb] [3] 

2018-19-29 21:19:51 EVENT: RESOLVE

2018-19-29 21:19:51 Contacting [x.x.x.x]:443/TCP via TCP

2018-19-29 21:19:51 EVENT: WAIT

2018-19-29 21:19:51 Connecting to [x.x.x.x]:443 (x.x.x.x) via TCPv4

2018-19-29 21:19:51 EVENT: CONNECTING

2018-19-29 21:19:51 Tunnel Options:V4,dev-type tun,link-mtu 1571,tun-mtu 1500,proto TCPv4_CLIENT,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client

2018-19-29 21:19:51 Creds: UsernameEmpty/PasswordEmpty

2018-19-29 21:19:51 Peer Info:
IV_GUI_VER=net.openvpn.connect.ios 3.0.0-712
IV_VER=3.2
IV_PLAT=ios
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_AUTO_SESS=1

Here's the server log:

Code: Select all

Aug 29 21:19:51 router openvpn[1857]: TCP connection established with [AF_INET]x.x.x.x:36908
Aug 29 21:19:51 router openvpn[1857]: x.x.x.x:36908 TLS: Initial packet from [AF_INET]x.x.x.x:36908, sid=5fc26525 6d904988
Aug 29 21:19:52 router openvpn[1857]: x.x.x.x:36908 Connection reset, restarting [0]
Aug 29 21:19:52 router openvpn[1857]: x.x.x.x:36908 SIGUSR1[soft,connection-reset] received, client-instance restarting

Thank for your help!

[svenove]

I have the same problem!
I filed a bug for it yesterday, no response so far..

https://community.openvpn.net/openvpn/ticket/1098

I'm using pfSense as OpenVPN-server. iPhone 7 and 8, iOS 11.4.1.

[svenove]

Could it be this issue?
https://community.openvpn.net/openvpn/ticket/1088

I might have a special char in the "state"-part of the certificate (an "ø"). I have to check that when I get home (as I'm unable to use OpenVPN for connecting right now..!).

[johos]

I have the exact same issues as you guys, i cannot even open the app anymore...

[buscho]

Hi Guys!

I'm also stucking in big troubles after updating to Version 3 of the "OpenVPN Connect" App. Until now, I used the the app to connect via a "Per-App VPN" on iOS Devices. After updating to Version 3, "Per-App VPN" isn't working anymore... A profile deployed via our mobile device management isn't applied anymore to the app. I manually can add a ".openvpn" file and this profile is working (not as an on-demand-profile (!)), but it seems to me, this profile could not be removed again... where is there a "delete" button?!?

The app is just unusable in this way... I need the old functions back...

[buscho]

Okay, after some digging in the forum I found the solution for the "Per-App VPN" Profile. See last post in this thread: viewtopic.php?f=36&t=26971

Since version 3 of the app, once has to use "net.openvpn.connect.app" as connection identifier while deploying a profile with an MDM. Earlier this was "net.openvpn.OpenVPN-Connect.vpnplugin". After changing this, it worked again. Unfortunately this is not mentioned in the docs yet.

To delete a profile, you have to click the small ">" at the right side of the profile entry. Then the detail page of the profile opens and at the bottom, you can select "delete". For me it seems quite tricky to click the ">" the right way... maybe my fingers are to fat

Cheers!

Buscho

[ordex]

Is this really related to this thread? I don't think your problem was a crash?

Since version 3 of the app, once has to use "net.openvpn.connect.app" as connection identifier while deploying a profile with an MDM. Earlier this was "net.openvpn.OpenVPN-Connect.vpnplugin". After changing this, it worked again. Unfortunately this is not mentioned in the docs yet.

in any case..this change existed already in v1.2.9 and it is mentioned in the *doc* here:
https://docs.openvpn.net/connecting/con ... onfig_file

[ordex]

Is this really related to this thread? I don't think your problem was a crash?

Oh I see now that the thread had deviated from the title.

[newi]

The iOS client update that just came out fixed my issue!

[svenove]

The iOS client update that just came out fixed my issue!

Same here, 3.0.1 fixed the issue on both our devices.