server certificate verification failed

[n4rky]

Hi,

I've been running openvpn for--I don't even know how long. The server is on an Arch system and so should be running the latest version.

All is well, even with OpenVPN Connect on my Android phone running Jelly Bean. But my Android tablet running Ice Cream Sandwich gets (copied by hand) "OpenVPN server certificate verification failed: PolarSSL: SSL read error: X509 - Certificate verification failed, e.g. CRL, CA or signature check failed.

I'm baffled by this. I'm not seeing any problems anywhere else on my VPN. The server log says:

Code: Select all

Feb 21 17:37:25 atlanta openvpn[13391]: Thu Feb 21 17:37:25 2013 67.169.2.178:45106 TLS: Initial packet from [AF_INET]67.169.2.178:45106, sid=5e529cc4 8534bdfc
Feb 21 17:38:25 atlanta openvpn[13391]: Thu Feb 21 17:38:25 2013 67.169.2.178:45106 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Feb 21 17:38:25 atlanta openvpn[13391]: Thu Feb 21 17:38:25 2013 67.169.2.178:45106 TLS Error: TLS handshake failed
Feb 21 17:38:25 atlanta openvpn[13391]: Thu Feb 21 17:38:25 2013 67.169.2.178:45106 SIGUSR1[soft,tls-error] received, client-instance restarting

How do I fix this?

Thanks!

[charles.pugh]

Old thread but here's one possible resolution.
Make sure your date/time is correct!
The verification will fail if it's not pretty close to correct.
That fixed mine.

[clockzhong]

I got the same error, but I've checked my date and time, they are correct. Who else could provide help and any clues? Thanks in advance.

[GlennSam]

I've exactly the same problem. I checked my date and time - they are correct. Many hours of googling have turned up only unhelpful suggestions to regenerate the certificates or to open the firewall. What am I doing in the wrong way?

[TinCanTech]

The best way to solve problems like this is to post a new thread here:
viewforum.php?f=6

After reading the Forum rules (top of that page)