SOLVED: OpenVPN on Android: Unable to Establish Connection

[thomasps]

I'm following the wiki instructions to setup the OpenVPN client on my Android.

Device: HTC One M8
OS: Cyanogenmod 12.1
OpenVPN App: OpenVPN for Android 0.6.44 (Arne Schwabe)
Server: Amahi 8 w/ Open VPN app

I can verify the VPN works because I can connect with a laptop.
On Android I cannot make it work as I get numerous errors in the log. Here are the first few lines:

Code: Select all

15:11 OpenSSL: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed 15:11 TLS_ERROR: BIO read tls_read_plaintext error 15:11 TLS Error: TLS handshake failed 15:11 TLS Error: TLS object -> incoming plaintext read error

The current Android OpenVPN app is a bit different than the screenshots from the wiki, so perhaps I'm missing some default options.

[bigfoot65]

This could be related to the fact you are using a rooted version of Android. We based the guidance on the default Android OS.

Did you recheck your steps in the tutorial? I have the same setup and had no issues myself.

Although it's been a while since I installed mine. The app might have been updated and the tutorial might be outdated. The community provided this guidance, so it may need some tweaking now.

Are you using the app identified in the tutorial?

[thomasps]

This could be related to the fact you are using a rooted version of Android. We based the guidance on the default Android OS.

Did you recheck your steps in the tutorial? I have the same setup and had no issues myself.

Although it's been a while since I installed mine. The app might have been updated and the tutorial might be outdated. The community provided this guidance, so it may need some tweaking now.

Are you using the app identified in the tutorial?

I think it has to do with some of the defaults of the app. I turned off "certificate hostname check" which is on by default and it now works. Does anyone know how critical this is? I also still get some errors in the log around ipv6

[bigfoot65]

Not sure if that will be a problem. The IPV6 is not supported by Amahi so you can turn that off.

Is this considered resolved?

[thomasps]

Not sure if that will be a problem. The IPV6 is not supported by Amahi so you can turn that off.

Is this considered resolved?

Solved. thanks

[bigfoot65]

No problem. Happy to assist.