I'm trying to add OpenVPN, using the .ovpn file from my provider. I get an error indicating my configuration is bad. When I look at the logs I see these lines:
Jan 19 23:56:30 rc_service: httpd 22771:notify_rc start_vpnclient1
Jan 19 23:56:32 ovpn-client1[29298]: Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
Jan 19 23:56:32 ovpn-client1[29298]: Options error: You must define CA file (--ca) or CA path (--capath) and/or peer fingerprint verification (--peer-fingerprint)
Jan 19 23:56:32 ovpn-client1[29298]: Use --help for more information.
Jan 19 23:56:32 openvpn: Starting OpenVPN client 1 failed!
Jan 19 23:56:33 openvpn-routing: Clearing routing table for VPN client 1
Do I need to add something to the .ovpn file, or is there some setting in the AC68U interface that I need to set?
Jan 19 23:56:30 rc_service: httpd 22771:notify_rc start_vpnclient1
Jan 19 23:56:32 ovpn-client1[29298]: Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
Jan 19 23:56:32 ovpn-client1[29298]: Options error: You must define CA file (--ca) or CA path (--capath) and/or peer fingerprint verification (--peer-fingerprint)
Jan 19 23:56:32 ovpn-client1[29298]: Use --help for more information.
Jan 19 23:56:32 openvpn: Starting OpenVPN client 1 failed!
Jan 19 23:56:33 openvpn-routing: Clearing routing table for VPN client 1
Do I need to add something to the .ovpn file, or is there some setting in the AC68U interface that I need to set?
Last edited: