On 2023-08-13 08:52, Gert Doering wrote:
> Run the client with --verb 3 or 4, have a close look at the logfile.
>
> If there is nothing obvious to you, show us the log.
/var/log/openvpn/ is empty.
Probably I need to use journalctl <something>?
> If the server runs 2.3.10 (which is, like, "ancient") then my guess is
> that the server also runs "cipher BF-CBC", which is not considere a secure
> cipher anymore - so 2.6 will not use that by default.
>
> In this case, try adding
>
> cipher BF-CBC
> compat-mode 2.3.10
Adding
cipher=BF-CBC
compat-mode=2.3.10
to the [vpn] section of
/etc/NetworkManager/system-connections/MyConnection
did not help. Maybe this should go in my .opvn file.
Now I try to use `openvpn` at the shell, and it complains about:
Options error: Unrecognized option or missing or extra parameter(s) in
u...@myconnection.ovpn:47: tls-remote (2.6.3)
I assume, that this is yet another blast from the past, I need to
replace with something else.
> to your client config (... and get company to upgrade to at least 2.5.x
> as soon as possible).
Thanks for the headsup! I'll push them to do so as hard as I can :-)
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
