I can connect to my vpn with the .ovpn files generated from the AWS debian 10 buster linux server with or without password(made 2 .ovpn accounts, one with pass, one without) on both a pc and mac.
After pasting in the .ovpn file in the XR500 Hybrid VPN custom field, with no username or password, and click connect, I get this error:
Wed Jul 29 16:13:06 2020 OpenVPN 2.4.3 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jul 16 2019 Wed Jul 29 16:13:06 2020 library versions: OpenSSL 1.0.2n 7 Dec 2017, LZO 2.06 Wed Jul 29 16:13:06 2020 ERROR: username from Auth authfile '/tmp/lua_J1lnA6' is empty Wed Jul 29 16:13:06 2020 Exiting due to fatal error
If I use a username and password, I get this error:
Wed Jul 29 16:15:19 2020 OpenVPN 2.4.3 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jul 16 2019 Wed Jul 29 16:15:19 2020 library versions: OpenSSL 1.0.2n 7 Dec 2017, LZO 2.06 Wed Jul 29 16:15:19 2020 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Wed Jul 29 16:15:19 2020 neither stdin nor stderr are a tty device and you have neither a controlling tty nor systemd - can't ask for 'Enter Private Key Password:'. If you used --daemon, you need to use --askpass to make passphrase-protected keys work, and you can not use --auth-nocache. Wed Jul 29 16:15:19 2020 Exiting due to fatal error
I've tried 2 different OpenVPN install scripts,with all defauld options, both give the same error as above:
Thank you, I think the issue is that it's trying to authenticate with the user/pass as part of the config but we don't support that. Can they provide a new config where you can input the user/pass outside the config?
Looks like the same config but regardless could you try this please:
client dev tun proto udp remote <VPN IP> <PORT> cipher AES-128-GCM resolv-retry infinite nobind persist-key persist-tun verb 3 remote-cert-tls server verify-x509-name server_rdKGYtqAmhMbmhTW name auth-user-pass
Put this entry under the rest of the file: tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
I don't have easy access to this unfortunately. I can ask a dev to see if they can take a look and see if they have an idea but they are very busy at the moment.
@Netduma-Fraser I set you up with an AWS login to try it out. Any IPs/ports have been set to open in the AWS console security group, and no firewall is setup. I sent the login details in a private message.
