Troubleshooting OpenVPN 1.0.1 on iOS5

Official client software for OpenVPN Access Server and OpenVPN Cloud.
Post Reply
Garin
OpenVpn Newbie
Posts: 2
Joined: Tue Aug 12, 2014 4:30 pm

Troubleshooting OpenVPN 1.0.1 on iOS5

Post by Garin » Tue Aug 12, 2014 4:34 pm

I'm having trouble with an older iPad 1...

I am fairly sure its the iPad 1 and/or the OpenVPN 1.0.1 version on it. Newer i-devices running iOS 7 (such as iPad 2, iPhone 5C, iPhone 5, etc) all work fine. I'm using the same *.ovpn profile for all devices.

Do you know of any reason why the iPad 1 w/ iOS5 and OpenVPN 1.0.1 would have issues, but all devices with iOS7 and the newest OpenVPN version would work fine (given same profile)?

The error I get is something about security certificate failure...but it doesn't make sense. I'm embedding the CA.crt, CA.key and Server.CRT in the profile, and using the same profile for all devices. It works fine except for the iPad 1. And I checked my work several times, deletign the profile from the iPad 1, and grabbing it from the server again.

Any help is appreciaetd.

Garin
OpenVpn Newbie
Posts: 2
Joined: Tue Aug 12, 2014 4:30 pm

Re: Troubleshooting OpenVPN 1.0.1 on iOS5

Post by Garin » Wed Aug 13, 2014 2:21 am

Still stumped on this, but here is some more detailed information:

1) the general error I get with the iPad 1/OpenVPN 1.0.1 is: Server certificate verification failed: PolarSSL: SSL read error: x509 - Certifiate verification failed, e.g. CRL...

2) Like I said, I'm using the exact same ovpn profile for all of the devices, and only the iPad 1 fails like this - ipad 2, iphone 5c, etc all work, but are running iOS7 and updated versions

3) I compared the logs, and only saw two things different:
a) in the iPad 1/failed logs, the IV_VER=1.0, whereby in the other devices where it worked, its 3.0
b) there seems to be two cert verifications, and all the devices that work do one first, and on the iPad1 it does the OTHER first, and the second fails
c) whereas on the device where it works, it states the SSL handshake parameters, on the iPad 1 it gives the same message up above.

I can post the whole logs if that helps...anyone know whats going on?

Post Reply