TLS error: Unsupported protocol.
Posted: Thu Sep 17, 2020 8:36 am
Hello,
My openvpn server is 2.4.9. I am using following ciphers, with ta.key.
There is two yealink phones that I should connect to my openvpn server. In first phone openvpn version is 2.4.2, and it successfully connecting. The second yealink (W60B) phone cant connect due to the following error that I found on my OpenVPN server:
In yealink phone logs, I found that openvpn version is 2.2.1, and read, that this openvpn client version not supporting tls 1.2, and this is the cause of the issue.
Please advise, can I somehow connect this phone to my openvpn? and actually my investigation is went to the right way or not?
My openvpn server is 2.4.9. I am using following ciphers, with ta.key.
Code: Select all
cipher AES-256-CBC
auth SHA256Code: Select all
*.*.*.*:50100 TLS: Initial packet from [AF_INET]*.*.*.*:50100, sid=d983e1b2 b0150154
*.*.*.*:50100 TLS error: Unsupported protocol. This typically indicates that client and server have no common TLS version enabled. This can be caused by mismatched tls-version-min and tls-version-max options on client and server. If your OpenVPN client is between v2.3.6 and v2.3.2 try adding tls-version-min 1.0 to the client configuration to use TLS 1.0+ instead of TLS 1.0 only
*.*.*.*:50100 OpenSSL: error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
*.*.*.*:50100 TLS_ERROR: BIO read tls_read_plaintext error
*.*.*.*:50100 TLS Error: TLS object -> incoming plaintext read error
*.*.*.*:50100 TLS Error: TLS handshake failed
*.*.*.*:50100 SIGUSR1[soft,tls-error] received, client-instance restartingPlease advise, can I somehow connect this phone to my openvpn? and actually my investigation is went to the right way or not?