[Solved] OpenVPN Connect reaches timeout while OpenVPN GUI establishes connection

[Mamue]

Hi,

OpenVPN Connect (1.1.1.17 build 76) on Android 6.0.1 (Cyanogenmod 13.0) reaches a timeout while OpenVPN GUI (OpenVPN 2.3.10) on Windows 7 can establish a connection with the exact same config file and certificate. When I use my phone as a hotspot for my notebook a session connection can be established while my mobile phone can't.

I use the OpenVPN server on a QNAP TS-212P. I installed a certificate from Let's Encrypt for https connections, which is working.

I downloaded the pre-defined config file from my the QNAP web management interface and put it into both, the OVPN GUI and OVPN Connect app. The ca.crt and openvp.ovpn are in the same directory, imported via "Import profile from SD card":

Code: Select all

client
dev tun
script-security 3
proto udp
remote  [i]subdomain[/i].myqnapcloud.com  [i]port[/i]
remote-cert-tls server
resolv-retry infinite
nobind
ca ca.crt
auth-user-pass
reneg-sec 0
cipher AES-256-CBC
tls-cipher TLS-SRP-SHA-RSA-WITH-3DES-EDE-CBC-SHA:TLS-DHE-RSA-WITH-AES-128-CBC-SHA:TLS-DHE-RSA-WITH-AES-256-CBC-SHA
comp-lzo

This is the log from the app:
http://imgur.com/Yay3k1J

I can't tell why the applications behave differently, the options I use (as far as I'm not blind) are supported by OpenVPN Connect. Can someone hint in the direction where I need to look to to fix this problem?

Any help much appreciated, thank you in advance!
Mamue

[TinCanTech]

In your log: UNUSED OPTIONS are not used by the app .. I do not know how that will effect your --tls-cipher statement.

Also, check your server log for connection attempts .. perhaps the packets do not even get to your server.

[Mamue]

Thanks for pointing this out, when I get home I'll definitely look further into the matter of unused options.

[Mamue]

Hi,

I found https://forum.qnap.com/viewtopic.php?p=318258 on the QNAP forum. The latest post did the trick.

goto Settings/OpenVPN and enable Force AES-CBC Ciphersuite setting, otherwise you will just sit and spin when OpenVPN client tries to connect.

Now it is working. I may test the unused option part with different ciphers, which may resolve the problem too. But since this is a quick and working hotfix, I'm just glad it works now.

[TinCanTech]

Great .. Thanks for letting us know your solution