Jump to content

maxvit

Forum Members
  • Posts

    2
  • Joined

  • Last visited

Everything posted by maxvit

  1. Удалось обновить openssl и openvpn на сервере. Проблема вопроизводится при указании в конфигурации сервера: tls-version-max 1.0
  2. Имеется Keenetic 4G, KeeneticOS: 3.4.6. Есть проблема с подключением к OpenVPN серверу. Конфиг: client dev tun proto udp remote 192.168.0.1 1195 resolv-retry infinite auth SHA1 cipher BF-CBC comp-lzo verb 5 <ca> ... </ca> <cert> ... </cert> <key> ... </key> Лог: [I] Jun 22 16:06:34 OpenVPN1: Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client' [I] Jun 22 16:06:34 OpenVPN1: Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server' [I] Jun 22 16:06:34 OpenVPN1: Socket Buffers: R=[155648->155648] S=[155648->155648] [I] Jun 22 16:06:34 OpenVPN1: UDP link local (bound): [AF_INET][undef]:1194 [I] Jun 22 16:06:34 OpenVPN1: UDP link remote: [AF_INET]192.168.0.1:1195 [I] Jun 22 16:06:34 OpenVPN1: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay [I] Jun 22 16:06:34 OpenVPN1: TLS: Initial packet from [AF_INET]192.168.0.1:1195, sid=c399bbe9 6b9069d9 [E] Jun 22 16:06:35 OpenVPN1: OpenSSL: error:1425F102:lib(20):func(607):reason(258) [E] Jun 22 16:06:35 OpenVPN1: TLS_ERROR: BIO read tls_read_plaintext error [E] Jun 22 16:06:35 OpenVPN1: TLS Error: TLS object -> incoming plaintext read error [E] Jun 22 16:06:35 OpenVPN1: TLS Error: TLS handshake failed [I] Jun 22 16:06:35 OpenVPN1: TCP/UDP: Closing socket [I] Jun 22 16:06:35 OpenVPN1: SIGTERM[soft,tls-error] received, process exiting [E] Jun 22 16:06:35 ndm: Service: "OpenVPN1": unexpectedly stopped Я так понимаю, проблема в том, что на сервере OpenVPN используется TLSv1, а на Keenetic openssl без поддержки TLSv1. Можно ли как-то включить поддержку TLSv1?
×
×
  • Create New...