OpenVPN 2.4.0 client problems [Solved]

[MacG32]

Hello all. I've tried this tutorial: https://www.snbforums.com/threads/h...ia-and-other-vpn-providers-10-15-fixed.30851/ , another tutorial, and combinations of both, but I can not get the OpenVPN client to work correctly. Ir runs, but I can't connect to the internet. My log file and settings are listed below. I tried to import the correct .ovpn file from https://www.privateinternetaccess.com/openvpn/openvpn-strong.zip and get "Error 17 while importing file - invalid key and/or certificate! Fix your config file, then import it again.", so I have to manually import the certs. Thank you.

http://pastebin.com/qL1R2Ubw

http://oi63.tinypic.com/b9hk04.jpg

 

[Santiago C]

Open the zip file, you'll have there a file if I'm not mistaken is called ca4096.crt. Paste its contents in the CA box of the vpn client config page, will look something like this:

 

[MacG32]

Open the zip file, you'll have there a file if I'm not mistaken is called ca4096.crt. Paste its contents in the CA box of the vpn client config page, will look something like this:
View attachment 8444

Thank you. I did that with the ca.rsa.4096.crt file and the crl.rsa.4096.pem file. The client turns on, but I get no internet access while it's running. The log has errors in it that I don't understand.

 

[MacG32]

Reverting back to 380.64_2 from 380.65 fixed it. This wasn't the solution I was looking for. When importing the .ovpn file in 380.64_2, I still get "Error 17 while importing file - invalid key and/or certificate! Fix your config file, then import it again.", so I have to manually import the certs. Below is the working log file. If there is a way to fix it using 380.65, I would greatly appreciate it.

http://pastebin.com/cagpyMk2

 

[RMerlin]

Why not contact the tech support of your tunnel provider? If their ovpn file isn't compatible with OpenVPN 2.4.0, then they will have to eventually address it on their end, as everyone will eventually upgrade to this new version.

 

[MacG32]

Why not contact the tech support of your tunnel provider? If their ovpn file isn't compatible with OpenVPN 2.4.0, then they will have to eventually address it on their end, as everyone will eventually upgrade to this new version.

The .ovpn file doesn't import the certs, but all of the settings import on OpenVPN v2.3.14 and OpenVPN v2.4.0. Both show the identical error. When I tested this on 380.4164, it imported the file just fine. No errors. All I had to do with OpenVPN v2.3.14 and OpenVPN v2.4.0 is add the cert files.

OpenVPN v2.4.0 should be backwards compatible with v2.3.14 settings, but this doesn't seem to be the case at all here. This tutorial: https://helpdesk.privateinternetacc...ing-up-an-Asus-Router-running-Merlin-Firmware is from the provider, but it doesn't work with 380.65's implementation of OpenVPN v2.4.0 when adjusting for the stronger encryption.

Why would OpenVPN even think to write new code that isn't capable of running with current provider's standards?

 

[rt2016]

Hi Guys, I do also face trouble when runing the new 380.65 stable version with OpenVpn 2.4.
Can't get the connection established anymore. Please find attached the system log.; I'm not really good in reading it.

 

[Ein]

I always used the standard config file from PIA, not Strong and it works.

I wasn't aware there are also strong files. I tried setting another client with the strong file and it doesn't work. Interesting

https://helpdesk.privateinternetacc...een-the-OpenVPN-config-files-on-your-website-

 

[Martineau]

I'm not really good in reading .......

Feb 4 19:57:56 openvpn[1574]: Linux ip -6 addr add failed: external program exited with error status: 2
Feb 4 19:57:56 openvpn[1574]: Exiting due to fatal error

https://www.snbforums.com/threads/release-asuswrt-merlin-380-65-is-now-available.37295/

 

[rt2016]

Maybe it was bit miss writing from my side, I have of course recognized the fatal error, but I have no idea how I can fix it. I guess I can find the solution inside the link I got from you @Martineau

 

[rt2016]

Well what I can see so far that my VPN provider is mentioned in https://www.snbforums.com/threads/release-asuswrt-merlin-380-65-is-now-available.37295/, does it mean that the VPN provider does have a problem on there server, sorry for asking like that I'm really new to the VPN setup. But could always get it running so far.

 

[sfx2000]

Why not contact the tech support of your tunnel provider? If their ovpn file isn't compatible with OpenVPN 2.4.0, then they will have to eventually address it on their end, as everyone will eventually upgrade to this new version.

the providers need to update sooner than later - there is good stuff inside OpenVPN 2.4, but that jump is going to be a bit painful...

 

[MacG32]

I downgraded to 380.64_2, setup the VPN client using https://www.privateinternetaccess.com/openvpn/openvpn-strong.zip , then upgraded to 380.65. The settings transferred over. All I needed to do is disable Cipher Negotiation. Below are the 2 pictures of the setup. Problems solved.

http://oi68.tinypic.com/2nb8xu1.jpg

http://oi65.tinypic.com/oia9hk.jpg

 

[Ein]

I didn't downgrade. I just changed my settings to match yours and Strong is working for me too.

 

[rt2016]

Just tried the same and disabled Cipher Negotiation, but still having the same error. I contacted Perfect Privacy support in the mean time, hope they are able to help.

 

[Ein]

I don't if model makes any difference? I have the 88U

 

[rt2016]

Me too I have the RT-AC88U.

 

[Ein]

I didn't exactly copied all his settings. I left some in default.

 

[RMerlin]

Why would OpenVPN even think to write new code that isn't capable of running with current provider's standards?

Things evolve. Old parameter might become obsolete or superceded by new ones. It's up to anyone who configures his client or server to keep up with config changes as they occur. 2.4.0 brought quite a few major changes that requires this.

 

[RMerlin]

Hi Guys, I do also face trouble when runing the new 380.65 stable version with OpenVpn 2.4.
Can't get the connection established anymore. Please find attached the system log.; I'm not really good in reading it.

The fix to your problem has been posted in the 380.65 release thread. you need to disable these two ipv6-related parameters because Asuswrt does not support IPv6 at OpenVPN's level.