openVPN client not connectin anymore

[Zephyer]

So, i've been using the openVPN client for over a year on my Synology (DSM7) with a VPN server on it.
Now, since the latest client update my family can't connect to the server anymore, all devices with the latest version off the app and iOS/iPadOS running 17.1 or later have the following error;

Code: Select all

Error message; Peer certificate verification failure

This is what the client log tells me;

[Dec 10, 2023, 20:59:49] VERIFY OK: depth=1, /C=TW/L=Taipel/O=Synology Inc./CN=Synology Inc. CA, signature: RSA-SHA256

[Dec 10, 2023, 20:59:49] VERIFY FAIL: depth=0, /C=TW/L=Taipel/O=Synology Inc./CN=synology, signature: RSA-SHA256 [certificate signature failure]

[Dec 10, 2023, 20:59:49] Transport Error: OpenSSLContext::SSL::read_cleartext: BIO_read failed, cap=2640 status=-1: error:0200008A:rsa routines::invalid padding / error:02000072:rsa routines::padding check failed / error:1C880004:Provider routines::RSA lib / error:06880006:asn1 encoding routines::EVP lib / error:0A000086:SSL routines::certificate verify failed

[Dec 10, 2023, 20:59:49] EVENT: CERT_VERIFY_FAIL OpenSSLContext::SSL::read_cleartext: BIO_read failed, cap=2640 status=-1: error:0200008A:rsa routines::invalid padding / error:02000072:rsa routines::padding check failed / error:1C880004:Provider routines::RSA lib / error:06880006:asn1 encoding routines::EVP lib / error:0A000086:SSL routines::certificate verify failed [ERR]

[Dec 10, 2023, 20:59:49] EVENT: DISCONNECTED

[Dec 10, 2023, 20:59:49] EVENT: CORE_THREAD_DONE

[Dec 10, 2023, 20:59:49] EVENT: DISCONNECT_PENDING

[Dec 10, 2023, 20:59:49] Raw stats on disconnect:
BYTES_IN : 2424
BYTES_OUT : 343
PACKETS_IN : 4
PACKETS_OUT : 3
SSL_ERROR : 1
CERT_VERIFY_FAIL : 1

Although the used certificat from synology was valid, i've renewed just now which didn't result in a working connection.
Also, rebooting devices and/or server didn't result in a working connection.

[Zephyer]

Oke, got it working...
https://www.reddit.com/r/synology/comme ... red_issue/

There is a bug in the openvpn app on the synology. Renewal of these certificates using the control panel doesnt work because the openvpn app wont reload them. You can solve it by issue your own self signed ssl certificate.