Opened 2 years ago

Last modified 2 years ago

#1132 new Bug / Defect

iOS 12.0.1 / OpenVPN Connect 3.0.2.(894) fails to connect

Reported by: jac299792458 Owned by: yuriy
Priority: major Milestone:
Component: OpenVPN Connect Version:
Severity: Not set (select this one, unless your'e a OpenVPN developer) Keywords:
Cc:

Description

All,

I've been successfully running my personal openvpn server for many years. My laptops and iOS devices connect happily (iOS via mobileconfig profiles). Until iOS 12.0.1 was released.

Immediately after rebooting into iOS 12.0.1, the client fails to connect. It continuously retries, and keeps repeating the same error message in the app log window:

2018-15-08 18:15:44 ----- OpenVPN Start -----
OpenVPN core 3.2 ios arm64 64-bit PT_PROXY built on Oct  3 2018 06:35:04

2018-15-08 18:15:44 EVENT: EPKI_INVALID_ALIAS 69646e740000000000000073 [ERR]

2018-15-08 18:15:44 Raw stats on disconnect:

2018-15-08 18:15:44 Performance stats on disconnect:
  CPU usage (microseconds): 20446
  Network bytes per CPU second: 0
  Tunnel bytes per CPU second: 0

2018-15-08 18:15:44 EVENT: EPKI_ERROR [69646e740000000000000073]: external_pki_error: identity not found [ERR]

2018-15-08 18:15:44 Raw stats on disconnect:

2018-15-08 18:15:44 Performance stats on disconnect:
  CPU usage (microseconds): 20927
  Network bytes per CPU second: 0
  Tunnel bytes per CPU second: 0

This is continuous, and repeatable. I've now disabled compression on the server-side, no change. It utterly fails to connect.

Any ideas what I might be doing wrong?

Thanks,

Jason.

Change History (3)

comment:1 Changed 2 years ago by Antonio

this looks like you need to re-import your PKCS#12 bundle.
You should be able to import it by opening the .ovpn12 file on the device.

comment:2 Changed 2 years ago by jac299792458

Hi Antonio,

I've never loaded an ovpn file, configuration or otherwise, into any of my iOS devices. Rather, I create a .mobileconfig profile containing an SSL VPN configuration. My OpenVPN configuration is loaded into it as key/value pairs. This includes the CA cert and all other items.

comment:3 Changed 2 years ago by Antonio

Ok, then the "PKCS#12" bundle is coming from the mobileconfig itself. Could you try reloading it please?

Note: See TracTickets for help on using tickets.