iOS 12.0.1 / OpenVPN Connect 3.0.2.(894) fails to connect

[jac299792458]

All,

I've been successfully running my personal openvpn server for many years. My laptops and iOS devices connect happily (iOS via mobileconfig profiles). Until iOS 12.0.1 was released.

Immediately after rebooting into iOS 12.0.1, the client fails to connect. It continuously retries, and keeps repeating the same error message in the app log window:

2018-15-08 18:15:44 ----- OpenVPN Start -----
OpenVPN core 3.2 ios arm64 64-bit PT_PROXY built on Oct  3 2018 06:35:04

2018-15-08 18:15:44 EVENT: EPKI_INVALID_ALIAS 69646e740000000000000073 [ERR]

2018-15-08 18:15:44 Raw stats on disconnect:

2018-15-08 18:15:44 Performance stats on disconnect:
  CPU usage (microseconds): 20446
  Network bytes per CPU second: 0
  Tunnel bytes per CPU second: 0

2018-15-08 18:15:44 EVENT: EPKI_ERROR [69646e740000000000000073]: external_pki_error: identity not found [ERR]

2018-15-08 18:15:44 Raw stats on disconnect:

2018-15-08 18:15:44 Performance stats on disconnect:
  CPU usage (microseconds): 20927
  Network bytes per CPU second: 0
  Tunnel bytes per CPU second: 0

This is continuous, and repeatable. I've now disabled compression on the server-side, no change. It utterly fails to connect.

Any ideas what I might be doing wrong?

Thanks,

Jason.

[Antonio Quartulli]

this looks like you need to re-import your PKCS#12 bundle.
You should be able to import it by opening the .ovpn12 file on the device.

[jac299792458]

Hi Antonio,

I've never loaded an ovpn file, configuration or otherwise, into any of my iOS devices. Rather, I create a .mobileconfig profile containing an SSL VPN configuration. My OpenVPN configuration is loaded into it as key/value pairs. This includes the CA cert and all other items.

[Antonio Quartulli]

Ok, then the "PKCS#12" bundle is coming from the mobileconfig itself. Could you try reloading it please?

[Gert Döring]

OpenVPN Inc does not want to receive any feedback for the "Connect"
OpenVPN clients via the community bug trackers (here and in GH issues).

Please resubmit - if still relevant - via ​https://support.openvpn.net/