Opened 5 years ago

Closed 15 months ago

#1132 closed Bug / Defect (wontfix)

iOS 12.0.1 / OpenVPN Connect 3.0.2.(894) fails to connect

Reported by: jac299792458 Owned by: OpenVPN Inc.
Priority: major Milestone:
Component: OpenVPN Connect Version:
Severity: Not set (select this one, unless your'e a OpenVPN developer) Keywords:
Cc:

Description

All,

I've been successfully running my personal openvpn server for many years. My laptops and iOS devices connect happily (iOS via mobileconfig profiles). Until iOS 12.0.1 was released.

Immediately after rebooting into iOS 12.0.1, the client fails to connect. It continuously retries, and keeps repeating the same error message in the app log window:

2018-15-08 18:15:44 ----- OpenVPN Start -----
OpenVPN core 3.2 ios arm64 64-bit PT_PROXY built on Oct  3 2018 06:35:04

2018-15-08 18:15:44 EVENT: EPKI_INVALID_ALIAS 69646e740000000000000073 [ERR]

2018-15-08 18:15:44 Raw stats on disconnect:

2018-15-08 18:15:44 Performance stats on disconnect:
  CPU usage (microseconds): 20446
  Network bytes per CPU second: 0
  Tunnel bytes per CPU second: 0

2018-15-08 18:15:44 EVENT: EPKI_ERROR [69646e740000000000000073]: external_pki_error: identity not found [ERR]

2018-15-08 18:15:44 Raw stats on disconnect:

2018-15-08 18:15:44 Performance stats on disconnect:
  CPU usage (microseconds): 20927
  Network bytes per CPU second: 0
  Tunnel bytes per CPU second: 0

This is continuous, and repeatable. I've now disabled compression on the server-side, no change. It utterly fails to connect.

Any ideas what I might be doing wrong?

Thanks,

Jason.

Change History (6)

comment:1 Changed 5 years ago by Antonio Quartulli

this looks like you need to re-import your PKCS#12 bundle.
You should be able to import it by opening the .ovpn12 file on the device.

comment:2 Changed 5 years ago by jac299792458

Hi Antonio,

I've never loaded an ovpn file, configuration or otherwise, into any of my iOS devices. Rather, I create a .mobileconfig profile containing an SSL VPN configuration. My OpenVPN configuration is loaded into it as key/value pairs. This includes the CA cert and all other items.

comment:3 Changed 5 years ago by Antonio Quartulli

Ok, then the "PKCS#12" bundle is coming from the mobileconfig itself. Could you try reloading it please?

comment:4 Changed 3 years ago by Gert Döring

Owner: changed from yuriy to denys
Status: newassigned

comment:5 Changed 3 years ago by Antonio Quartulli

Owner: changed from denys to OpenVPN Inc.

comment:6 Changed 15 months ago by Gert Döring

Resolution: wontfix
Status: assignedclosed

OpenVPN Inc does not want to receive any feedback for the "Connect"
OpenVPN clients via the community bug trackers (here and in GH issues).

Please resubmit - if still relevant - via https://support.openvpn.net/

Note: See TracTickets for help on using tickets.