I am working with a Balance One FW 8.3.0 build 5514 trying to setup openVPN server.
After enabling Remote User access and download the OpenVPN profile file from the status page I get this error:
Error message: Peer certificate verification failure
I have tried both profiles (route all dns or not) and both results in same error.
On the client computer this is what I can see in the logs, any ideas what I’m doing wrong?
P.S when tested L2TPP server I am able to connect just fine, however its very slow hence the hope OpenVPN will be faster.
⏎[Dec 26, 2023, 14:56:17] Frame=512/2048/512 mssfix-ctrl=1250
⏎[Dec 26, 2023, 14:56:17] UNUSED OPTIONS
5 [resolv-retry] [infinite]
6 [nobind]
7 [persist-key]
8 [persist-tun]
10 [verb] [3]
13 [tls-client]
⏎[Dec 26, 2023, 14:56:17] EVENT: RESOLVE ⏎[Dec 26, 2023, 14:56:17] Contacting 50.***.***.161:1194 via UDP
⏎[Dec 26, 2023, 14:56:17] EVENT: WAIT ⏎[Dec 26, 2023, 14:56:17] UnixCommandAgent: transmitting bypass route to /var/run/agent_ovpnconnect.sock
{
"host" : "50.***.***.161",
"ipv6" : false,
"pid" : 812
}
⏎[Dec 26, 2023, 14:56:17] Connecting to [50.***.***.161]:1194 (50.***.***.161) via UDPv4
⏎[Dec 26, 2023, 14:56:17] EVENT: CONNECTING ⏎[Dec 26, 2023, 14:56:17] Tunnel Options:V4,dev-type tun,link-mtu 1521,tun-mtu 1500,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client
⏎[Dec 26, 2023, 14:56:17] Creds: Username/Password
⏎[Dec 26, 2023, 14:56:17] Peer Info:
IV_VER=3.git::d06e216e
IV_PLAT=mac
IV_NCP=2
IV_TCPNL=1
IV_PROTO=30
IV_CIPHERS=AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305
IV_GUI_VER=OCmacOS_3.3.1-4000
IV_SSO=openurl,crtext
⏎[Dec 26, 2023, 14:56:18] Transport Error: OpenSSLContext::SSL::read_cleartext: BIO_read failed, cap=2576 status=-1: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
⏎[Dec 26, 2023, 14:56:18] EVENT: CERT_VERIFY_FAIL OpenSSLContext::SSL::read_cleartext: BIO_read failed, cap=2576 status=-1: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed⏎[Dec 26, 2023, 14:56:18] EVENT: DISCONNECTED ⏎[Dec 26, 2023, 14:56:22] Raw stats on disconnect:
BYTES_IN : 3171
BYTES_OUT : 521
PACKETS_IN : 5
PACKETS_OUT : 4
SSL_ERROR : 1
CERT_VERIFY_FAIL : 1