Leaderboard

Latvia

Hi, Please be patient with this - I realise there are lots of posts on this. Been using OpenVPN since Feb 2022, almost daily (sometimes use Eddie client on a laptop). Not had any problems since Feb 2022. Worked fine last Sunday 7th, on Monday failed with OpenVPN Log message "VERIFY ERROR:depth=1, error=certificate has expired". Seen the posts on here so have: 1. followed the "run Eddie, uncheck 'remember me' etc." instructions. 2. using OpenVPN Utility, ran 'Remove all downloaded VPN provider files' and 'Delete user key, password and cert files' 3. New log in to your website, created new VPN Device, created new Config files using your Generator and uploaded new Config files 4. run OpenVPN 'wizard' and no change OpenVPN Log Wed Apr 10 11:59:44 2024 VERIFY ERROR: depth=1, error=certificate has expired: C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org Wed Apr 10 11:59:44 2024 OpenSSL: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed user.key and user.crt at service.vpn.manager/AirVPN are new files (i.e. re date/time). Hope someone can help Thanks

Thanks for reply. This is where it gets complicated. 1. OpenVPN wants a ta.key (presumably to go with the ca.crt?) at service.vpn.manager/Downloads/AirVPN But 'Advanced' Config Generator doesn't seem to generate that file, instead it generates tls-crypt.key (not sure here??) Fixing that looks like a rabbit hole to me! 2. Switching to WireGuard looks to be a better solution long term, but (unless anyone can point to easy install on Raspberry Pi OSMC??) that also looks like a rabbit hole! While v much respecting AirVPN staff, the problem looks to be that regular Config Gen is including a now out-of-date ca.crt file - as of 8th April. That is, if I delete all VPN files (using the OpenVPN Utility), new ovpn files from regular Config Gen include the out-of-date ca.crt file. I'm sure there are sound reasons why you don't want to fix that, but for me this seems to mean AirVPN no longer works on my setup, which is a shame. All help gratefully accepted. Thanks.

pfsense warned me last month that some old certs were expiring so I'm not surprised that some people are seeing this results. It's unfortunate that software (eddie) or this web site didn't warn people they were using certs about to expire.

Same problem here. Suddenly today. Downloaded latest version and installed just in case. There must be something wrong other than here locally? The suggested fix is way too complicated... That was lazy.. pointing to a description of ten thousand words to do something that probably is easy... Please give a step by step way to fix this without a million other things mixed in.

Hello! The problem affects those users who run Eddie Desktop edition with OpenVPN and never logged out for more than a year, or use OpenVPN clients with configuration files generated before 2021. Since Eddie Desktop edition re-downloads certificates and keys only when the operator logs in, locally some certificates have expired because we extend their expiration date automatically at least one year in advance (three years normally). Please try the following procedure to quickly resolve the problem: run Eddie on Eddie's main window uncheck "Remember me" log your account out log your account in (you'll need to re-enter your AirVPN credentials) try again a connection Kind regards