I specify that I connected in SSH and in "root" on the console of my synology and that I can see the packets arrived during my connection attempt. I get this before I get the error message : https://zupimages.net/viewer.php?id=21/49/g06s.jpg
2021-12-08 22:03:01 1
2021-12-08 22:03:01 ----- OpenVPN Start -----
OpenVPN core 3.git::58b92569 ios arm64 64-bit
2021-12-08 22:03:01 OpenVPN core 3.git::58b92569 ios arm64 64-bit
2021-12-08 22:03:01 Frame=512/2048/512 mssfix-ctrl=1250
2021-12-08 22:03:01 UNUSED OPTIONS
1 [tls-client]
3 [pull]
5 [script-security] [2]
2021-12-08 22:03:01 EVENT: RESOLVE
2021-12-08 22:03:01 Contacting [xxxx]:1194/UDP via UDP
2021-12-08 22:03:01 EVENT: WAIT
2021-12-08 22:03:01 Connecting to [xxxx]:1194 (xxxx) via UDPv4
2021-12-08 22:03:01 EVENT: CONNECTING
2021-12-08 22:03:01 Tunnel Options:V4,dev-type tun,link-mtu 1601,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-client
2021-12-08 22:03:01 Creds: Username/Password
2021-12-08 22:03:01 Peer Info:
IV_VER=3.git::58b92569
IV_PLAT=ios
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_GUI_VER=net.openvpn.connect.ios_3.2.3-3760
IV_SSO=openurl
2021-12-08 22:03:01 VERIFY FAIL: depth=2, /C=US/O=Internet Security Research Group/CN=ISRG Root X1 [unable to get issuer certificate]
2021-12-08 22:03:01 Transport Error: OpenSSLContext::SSL::read_cleartext: BIO_read failed, cap=2576 status=-1: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
2021-12-08 22:03:01 EVENT: CERT_VERIFY_FAIL OpenSSLContext::SSL::read_cleartext: BIO_read failed, cap=2576 status=-1: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed [ERR]
2021-12-08 22:03:01 Raw stats on disconnect:
BYTES_IN : 4800
BYTES_OUT : 383
PACKETS_IN : 6
PACKETS_OUT : 5
SSL_ERROR : 1
2021-12-08 22:03:01 Performance stats on disconnect:
CPU usage (microseconds): 52475
Network bytes per CPU second: 98770
Tunnel bytes per CPU second: 0
2021-12-08 22:03:01 EVENT: DISCONNECTED
2021-12-08 22:03:01 Raw stats on disconnect:
BYTES_IN : 4800
BYTES_OUT : 383
PACKETS_IN : 6
PACKETS_OUT : 5
SSL_ERROR : 1
CERT_VERIFY_FAIL : 1
2021-12-08 22:03:01 Performance stats on disconnect:
CPU usage (microseconds): 63104
Network bytes per CPU second: 82134
Tunnel bytes per CPU second: 0
My client configuration file :
client
dev tun
tls-client
remote xxxx 1194
# The "float" tells OpenVPN to accept authenticated packets from any address,
# not only the address which was specified in the --remote option.
# This is useful when you are connecting to a peer which holds a dynamic address
# such as a dial-in user or DHCP client.
# (Please refer to the manual of OpenVPN for more information.)
#float
# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)
#redirect-gateway def1
# dhcp-option DNS: To set primary domain name server address.
# Repeat this option to set secondary DNS server addresses.
#dhcp-option DNS DNS_IP_ADDRESS
pull
# If you want to connect by Server's IPv6 address, you should use
# "proto udp6" in UDP mode or "proto tcp6-client" in TCP mode
proto udp
