Hi, On Sun, Aug 13, 2023 at 12:33:13AM +0000, Martin wrote: > after upgrading my PC from Debian 11 with openvpn 2.5.6-1 to Debian 12 > with openvpn 2.6.3-1+deb12u1, I can't connect to my company anymore. > Downgrading the openvpn package helps immediately, but that can't be > a long term solution, right? The company runs OpenVPN 2.3.10. > > Any idea how to solve the problem? Thank you so much!
Run the client with --verb 3 or 4, have a close look at the logfile.
If there is nothing obvious to you, show us the log.
If the server runs 2.3.10 (which is, like, "ancient") then my guess is
that the server also runs "cipher BF-CBC", which is not considere a secure
cipher anymore - so 2.6 will not use that by default.
In this case, try adding
cipher BF-CBC
compat-mode 2.3.10
to your client config (... and get company to upgrade to at least 2.5.x
as soon as possible).
gert
--
"If was one thing all people took for granted, was conviction that if you
feed honest figures into a computer, honest figures come out. Never doubted
it myself till I met a computer with a sense of humor."
Robert A. Heinlein, The Moon is a Harsh Mistress
Gert Doering - Munich, Germany g...@greenie.muc.de
signature.asc
Description: PGP signature
_______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
