Page 1 of 1

OpenVPN problem

Posted: Mon Dec 12, 2022 8:39 am
by clouver34
Hello everyone! I need help with OpenVPN.
Problem is going about 2-3 weeks since trying to make OpenVPN work properly on Keenetic and Mikrotik
Once OpenVPN isn't working because off
TLS Error: TLS handshake failed
i trying to fix that with guides that i ever can find.
After that OpenVPN on Keenitc can't connect and appear even more failure:
  • VERIFY ERROR: depth=0, error=unsupported certificate purpose: C=XX, O=XX, OU=IT, CN=ca
    OpenSSL: error:1416F086:lib(20):func(367):reason(134)
    TLS_ERROR: BIO read tls_read_plaintext error
    TLS Error: TLS object -> incoming plaintext read error
    TLS Error: TLS handshake failed
    Fatal TLS error (check_tls_errors_co), restarting
    Service: "OpenVPN0": unexpectedly stopped.
Here is the configuration on Keenetic
client
dev tun
proto tcp
remote 9X.XXX.XXX.XXX 1194
nobind
persist-key
persist-tun
<ca>
-----BEGIN CERTIFICATE-----
XXX
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----
XXXX
-----END ENCRYPTED PRIVATE KEY-----
</key>
<auth-user-pass>
username
password
</auth-user-pass>
remote-cert-tls server
verb 3
Does it even possible to make Mikrotic and Keenetic working properly with each other?
I hope i described my problem normaly and can get help with that problem

P.S.Configuration was taken from: https://habr.com/ru/post/269679/
(2tun)

Re: OpenVPN problem

Posted: Wed Dec 14, 2022 3:04 pm
by Pippin
Hi,

We need a bit more information, server and client: configuration, logs @ --verb 4:
viewtopic.php?t=22603#p68963
.

Re: OpenVPN problem

Posted: Thu Dec 15, 2022 9:48 am
by clouver34
Pippin wrote:
Wed Dec 14, 2022 3:04 pm
Hi,

We need a bit more information, server and client: configuration, logs @ --verb 4:
viewtopic.php?t=22603#p68963
.
Hi.
Well there is
Server: mikrotik
client: keenetic KN-1112

P.S. After few days of trying to fix this problem i get less problem than it was
Thu Dec 15 12:47:02 2022 OpenSSL: error:1E08010C:DECODER routines::unsupported
Thu Dec 15 12:47:02 2022 Cannot load private key file [[INLINE]]
Probably there is something wrong that i don't know.