openvpn fail after full-upgrade

Support
1

Hi guys,
I cant connect with vpn after I launched full-upgrade today. My current parrot release is 4.3 64
logs:
Tue Oct 30 16:23:41 2018 OpenVPN 2.4.6 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 30 2018
Tue Oct 30 16:23:41 2018 library versions: OpenSSL 1.1.1 11 Sep 2018, LZO 2.10
Tue Oct 30 16:23:41 2018 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1300)
Tue Oct 30 16:23:41 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]185.110.50.34:35791
Tue Oct 30 16:23:41 2018 Socket Buffers: R=[87380->87380] S=[16384->16384]
Tue Oct 30 16:23:41 2018 Attempting to establish TCP connection with [AF_INET]185.110.50.34:35791 [nonblock]
Tue Oct 30 16:23:42 2018 TCP connection established with [AF_INET]185.110.50.34:35791
Tue Oct 30 16:23:42 2018 TCP_CLIENT link local: (not bound)
Tue Oct 30 16:23:42 2018 TCP_CLIENT link remote: [AF_INET]185.110.50.34:35791
Tue Oct 30 16:23:42 2018 TLS: Initial packet from [AF_INET]185.110.50.34:35791, sid=5466c2a6 3cb01663
Tue Oct 30 16:23:42 2018 OpenSSL: error:1425F102:SSL routines:ssl_choose_client_version:unsupported protocol
Tue Oct 30 16:23:42 2018 TLS_ERROR: BIO read tls_read_plaintext error
Tue Oct 30 16:23:42 2018 TLS Error: TLS object -> incoming plaintext read error
Tue Oct 30 16:23:42 2018 TLS Error: TLS handshake failed
Tue Oct 30 16:23:42 2018 Fatal TLS error (check_tls_errors_co), restarting
Tue Oct 30 16:23:42 2018 SIGUSR1[soft,tls-error] received, process restarting
Tue Oct 30 16:23:42 2018 Restart pause, 5 second(s)

I appreciate any help

BTW my previous forum account has removed??

2

If i was to take a guess TLS version on the server is too low.

OpenSSL: error:1425F102:SSL routines:ssl_choose_client_version:unsupported protocol

To fix this your end you will have to lower you minimum accepted TLS version.
sudo nano /etc/ssl/openssl.cnf
Scroll right to the bottom (long way down) and change ‘MinProtocol’ from ‘TLSv1.2’ to ‘TLSv1’.
It should look like MinProtocol = TLSv1.

See if that works.

1 Like
3

I have the same problem with openvpn connection.
i get failed to connect message after latest update.
it says the connection failed because it timed out, and it took to long.
this wasnt before the update, and i dont know what the problem is.
Can anyone help please?