Page 1 of 1

iOS 12.0.1 update kills OpenVPN Connect

Posted: Wed Oct 10, 2018 1:10 pm
by jac299792458
All,

After updating iOS to 12.0.1, OpenVPN Connect fails to connect at all. Absolutely nothing else changed prior to this OS update. The `mobileconfig` which provides my two Always-On configs has been working for years. All certs (CA, key, cert, dhparam) are inlined as SSL VPN config parameters in the Profiles. This is for connecting to my self-hosted VPN servers. I've been running this configuration for so long, I've recently had to replace my CA certificate because it expired (10 years plus! About a year ago). IOW, I'm fairly certain nothing broke on my side.

The logs from the app:

Code: Select all

2018-15-08 18:15:44 ----- OpenVPN Start -----
OpenVPN core 3.2 ios arm64 64-bit PT_PROXY built on Oct  3 2018 06:35:04

2018-15-08 18:15:44 EVENT: EPKI_INVALID_ALIAS 69646e740000000000000073 [ERR]

2018-15-08 18:15:44 Raw stats on disconnect:

2018-15-08 18:15:44 Performance stats on disconnect:
  CPU usage (microseconds): 20446
  Network bytes per CPU second: 0
  Tunnel bytes per CPU second: 0

2018-15-08 18:15:44 EVENT: EPKI_ERROR [69646e740000000000000073]: external_pki_error: identity not found [ERR]

2018-15-08 18:15:44 Raw stats on disconnect:

2018-15-08 18:15:44 Performance stats on disconnect:
  CPU usage (microseconds): 20927
  Network bytes per CPU second: 0
  Tunnel bytes per CPU second: 0
Is there a new configuration option I should toggle? Nothing seems to jump out at me.

Thanks,

Jason.

Re: iOS 12.0.1 update kills OpenVPN Connect

Posted: Mon Oct 15, 2018 6:41 pm
by mbierman
My connection is dead too same circumstances (well, except for the 10 year old certificates).

the only difference is my client and Synology VPN server say there is a connection but I can't reach anything on my LAN or on the WAN once I start my VPN connection.

Re: iOS 12.0.1 update kills OpenVPN Connect

Posted: Wed Oct 17, 2018 8:41 pm
by darksky
Me 3... OpenVPN v2.4.6 running on Linux. None of my iOS 12.0.1 devices are able to transfer data although I am able to connect to the server just fine. As well, I can see in my DNS logs on the server that the iPhones are sending DNS requests which are getting resolved but again, no data beyond that is transferred.

EDIT: https://community.openvpn.net/openvpn/ticket/1129

Re: iOS 12.0.1 update kills OpenVPN Connect

Posted: Wed Oct 24, 2018 6:33 pm
by jac299792458
Ok, I guess that not everyone reads their log files. :-/

My problem, detailed in the OP, is specifically different from a) the compression issue, and b) connected without traffic flowing.

In my case, OpenVPN Connect continuously tries to connect, but keeps erroring out with the log messages I quoted in the OP.

Since it's been two weeks and I've not seen anyone else with a similar problem, much less a solution, this is most likely worthy of a bug report.

EDIT: https://community.openvpn.net/openvpn/t ... 132#ticket