Open VPN

[mazeman23 0]

Does anyone of the Devs have a update on the bug situation with IOS 14? My Openvpn app is unusable. Every confog from Airvpn i try its not connecting to the internet. the spinning circle inside the on/off slider is constantly spinning.

 

[SurprisedItWorks 49]

FWIW, my Air config (UDP/443) in OpenVPN Connect is working fine in iOS 14.1 (iPhone XS).  (Never tried it in 14.0.)

[madrat 19]

Mine has been fine since updating to 14.1 as well, on an iphone 7 plus.

[mazeman23 0]

Ahh ok when you choose TLS 1.3 it wont connect.
but with 1 , 1.1 , 1.2 it works perfect.

[OpenSourcerer 1435]

12 hours ago, mazeman23 said:

Ahh ok when you choose TLS 1.3 it wont connect.

Sorry, where do you choose that?

[timex0310 0]

I have the same issue. Re-downloading the VPN config and only selecting TCP seems to be a workaround for me. The others suggested above didn’t work, so sharing in case it helps.

[mazeman23 0]

In the settings from the Openvpn app in there scroll down to “minimum TLS Version” and chose either 1, 1.1 or 1.2 exept 1.3

The settings are from this app:
https://apps.apple.com/de/app/openvpn-connect/id590379981

[OpenSourcerer 1435]

I see. Yes, TLS 1.3 is not supported by any server yet. Staff also deprioritized this because it doesn't meaningfully contribute to OpenVPN connection security. It's implemented only on the websites for now.

[Staff 9972]

Hello!

TLS 1.3 is only available on experimental servers, and only on those servers where OpenVPN 2.5 is linked against OpenSSL, because mbedTLS does not support TLS 1.3. When we deploy OpenVPN 2.5 on all servers, it will be linked against OpenSSL, so TLS 1.3 will be available on all servers Keep in mind anyway that, so far, TLS 1.3 with OpenVPN is inessential.

Kind regards
 

[goduke 0]

Openvpn 2.5.0 x64 (wintap) , win7  x64, i see this in openvpn log:

Quote

DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.

Airvpn config  file options:

OpenVPN

UDP

443

1

Recommended for best performance

Should i be worried ?
 

[OpenSourcerer 1435]

Wrong thread. This is about OpenVPN on iOS 14.

And no, it's a deprecation warning because OpenVPN 2.5 changed some options, but the old ones still work.