SOLVED - OpenVPN for Android SSL error - ca md too weak

[HeyWAZZab33 0]

Hey there,

since a month or so I have a problem with the OpenVPN for Android app. It does not accept the configurations of the AirVPN configuration generator anymore.
I tried to set everything up fresh, but I still get the same error. Is there any way to make it work again without compromising on security?
I don't want to use Eddie, cause I have some issues with it and the OpenVPN for Android app has been working perfect for me.

Thanks for helping out



EDIT:
this helped. Remember to login and out of your devices and generate new configurations after renewing the certificate

Edited ... by HeyWAZZab33

[OpenSourcerer 1360]

Yeah, the config regeneration was the solution. Old configs bundle a SHA1 CA certificate which OpenSSL 3 doesn't like anymore, and that one is used by Schwabe's OpenVPN client.

Please also note the warnings in the logs. Some options changed in OpenVPN 2.5. When generating configs, tick Advanced and select OpenVPN version: >2.5 on the right to silence the deprecation warning, and disable compression to silence the security warning. I'm writing the latter because:

2 hours ago, HeyWAZZab33 said:

without compromising on security?

Compression trades a little security for a little less traffic amount.