Opened 4 years ago

Closed 18 months ago

#1300 closed Bug / Defect (wontfix)

Unable to connect to OpenVPN server on Window 10 when certificate authentication is on

Reported by: arienaibipinu Owned by: OpenVPN Inc.
Priority: major Milestone:
Component: OpenVPN Connect Version:
Severity: Not set (select this one, unless your'e a OpenVPN developer) Keywords:


It connects just fine on my Android 10 but I got an error when trying to connect on Windows 10. I should mention that I did import the certificates.

Errors logs:

⏎7/10/2020, 8:18:43 PM MbedTLSContext::epki_sign exception: ssl_external_pki: MbedTLS: could not obtain signature
⏎7/10/2020, 8:18:43 PM Client exception in transport_recv_excode: mbed TLS: SSL read error : RSA - Bad input parameters to function

Change History (6)

comment:1 Changed 4 years ago by Selva Nair

Is that log snippet from a server built with MbedTLS? Which version of client is used on Windows 10? The recent release (2.4.9) is built with OpenSSL 1.1.1f and it looks like not playing nice with an MbedTLS server. Anything useful in the client logs?

Last edited 4 years ago by Selva Nair (previous) (diff)

comment:2 Changed 4 years ago by arienaibipinu

I should mention that the connection works on Windows 10 when I switch my OpenVPN settings to password only (no certificate required).

I am using OpenVPN 3.1.3 (713)

The logs comes from the OpenVPN Connection application itself and I am afraid there's not much more to add.

Last edited 4 years ago by arienaibipinu (previous) (diff)

comment:3 Changed 4 years ago by Gert Döring

This is openvpn connect and should be addressed via openvpn, inc. support.

comment:4 Changed 3 years ago by Gert Döring

Owner: changed from yuriy to denys
Status: newassigned

comment:5 Changed 3 years ago by Antonio Quartulli

Owner: changed from denys to OpenVPN Inc.

comment:6 Changed 18 months ago by Gert Döring

Resolution: wontfix
Status: assignedclosed

OpenVPN Inc does not want to receive any feedback for the "Connect"
OpenVPN clients via the community bug trackers (here and in GH issues).

Please resubmit - if still relevant - via

Note: See TracTickets for help on using tickets.