My OpenVPN server breaks going from v382 to v384

[Wam7]

I created the keys and opvn file for OpenVPN sometime ago and it has worked fine on Merlin for some years. I hadn't upgrade my firmware for a while and was still using v382. I decide to update to the latest firmware and manage to get everything else like my IPv6 working fine but can not get OpenVPN to work with my previous keys.

I have tried this with both an RT-AC68U and my current RT-AC86U even doing a full reset and it is exactly the same outcome.
Is there any way to get v384 working with my old keys/.opvn?

Here are the working settings when using v382

 

[miroco]

You are probably on obsolete certificates.

https://forums.openvpn.net/viewtopic.php?t=28586

 

[Wam7]

You are probably on obsolete certificates.

https://forums.openvpn.net/viewtopic.php?t=28586

Thanks, this sounds like it is the case as if I use newer v3.07 OpenVPN connect client on my android phone then it fails to connect. I have to use older v3.05 to connect to the OpenVPN server running on the older v382 firmware.
I suspect the only way is to create new server and keys using the latest firmware. I haven't done this for a while so time to do some reading and research again.

 

[martinr]

Thanks, this sounds like it is the case as if I use newer v3.07 OpenVPN connect client on my android phone then it fails to connect. I have to use older v3.05 to connect to the OpenVPN server running on the older v382 firmware.
I suspect the only way is to create new server and keys using the latest firmware. I haven't done this for a while so time to do some reading and research again.

You tried importing new .ovpn config files onto the client and deleting the old configs?

 

[Makaveli]

You tried importing new .ovpn config files onto the client and deleting the old configs?

This!

Why importing Old config riles and not generating new one?

 

[Wam7]

This!

Why importing Old config riles and not generating new one?

The config file isn't the primary issue, the VPN server is not working with the old certs and keys. I have to get the VPN server setup correctly in the first place and then generate new config file.

 

[martinr]

The config file isn't the primary issue, the VPN server is not working with the old certs and keys. I have to get the VPN server setup correctly in the first place and then generate new config file.

I must be missing something: if the vpn server isn’t working with the old certs and key then generate new ones. I don’t even understand why you even need to be bothered about the old certs and keys: developers must have gone to a lot o trouble to make OpenVPN Server childproof. You generate a .ovpn config file and export it to the client. It contains all the necessary certs and keys. The user doesn’t even need to know there are such things as certs and keys, let alone what they do. You generate the config file, export and then import, press the button and the magic happens. In the same way you turn the ignition key to start the car in blissful and grateful ignorance of Bernoulli’s equation describing the airflow past the throttle plate.

Or have I got hold of the wrong end of the stick?

 

[Wam7]

I must be missing something: if the vpn server isn’t working with the old certs and key then generate new ones. I don’t even understand why you even need to be bothered about the old certs and keys: developers must have gone to a lot o trouble to make OpenVPN Server childproof. You generate a .ovpn config file and export it to the client. It contains all the necessary certs and keys. The user doesn’t even need to know there are such things as certs and keys, let alone what they do. You generate the config file, export and then import, press the button and the magic happens. In the same way you turn the ignition key to start the car in blissful and grateful ignorance of Bernoulli’s equation describing the airflow past the throttle plate.

Or have I got hold of the wrong end of the stick?

Yes you are missing something. I created the crt, keys and .ovpn years ago when you had to do in manually. I've used the same files for years through different router upgrades (N66U, AC66U, AC68U, AC86U) and different Merlin firmware upgrades. It has all worked perfectly up until the last upgrade due to the changes and improvements in OpenVPN, it is also now much simpler to setup.

I have it all setup and working again now, so thanks for your help.

 

[L&LD]

@Wam7 it seems like @martinr was spot on?