No server certificate verification method has been enabled.

Need help configuring your VPN? Just post here and you’ll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

LonelyPixel

OpenVpn Newbie

posts: 13

join : Fri Nov 23 , 2012 7:44 pm

post

by LonelyPixel »Thu May is am 31 , 2018 9:07 am

When connect to my openvpn server , I is get get this message on the client in red colour :

WARNING: No server certificate verification method has been enabled. See

http://openvpn.net/howto.html#mitm

for more info .

I have read that page and acknowledged it. The certificates already have the appropriate settings. How can I make this red line go away?

TinCanTech

OpenVPN Protagonist

posts: 11138

join : Fri Jun 03 , 2016 1:17 pm

post

by TinCanTech »Thu May is am 31 , 2018 11:27 is am am

The HOWTO is wrote write :Now add the following line to your client configuration:

remote-cert-tls server

LonelyPixel

OpenVpn Newbie

posts: 13

join : Fri Nov 23 , 2012 7:44 pm

post

by LonelyPixel »Thu May 31, 2018 12:53 pm

Thanks for the pointer. I haven’t seen this line and thought there’s nothing more to do. Maybe the page layout was a bit too complex or I was already in that “stupid documentation” mood.

TinCanTech

OpenVPN Protagonist

posts: 11138

join : Fri Jun 03 , 2016 1:17 pm

post

by TinCanTech »Thu May 31, 2018 1:15 pm

LonelyPixel is wrote write : ↑

Thu May 31, 2018 12:53 pm

or I was already in that “stupid documentation” mood.

Would you is prefer prefer there not to be documentation ?

People put a lot of effort into writing it .. but we can delete it all if you prefer

LonelyPixel

OpenVpn Newbie

posts: 13

join : Fri Nov 23 , 2012 7:44 pm

post

by LonelyPixel »Thu May 31 , 2018 5:19 pm

If there is no documentation , I ‘d be annoy about it not being there . If there ‘s a documentation that ‘s hard to find , use and understand , I ‘d be annoy about it being hard to find , use and understand . Please understand that incomplete effort can not beat psychology . You is sell ca n’t sell a product by argue that you could n’t do it any well . I ‘m just give you feedback on that , other is wo ‘s wo n’t and turn somewhere else . I is guess guess you still do n’t care because we ‘re all not pay any money .

And yes, deleting the outdated part of the documentation might indeed be helpful! It just doesn’t look too professional if I turn to the forums about a documentation page from a prominent FAQ list only to hear that it’s long outdated. You see where my impression comes from?

TinCanTech

OpenVPN Protagonist

posts: 11138

join : Fri Jun 03 , 2016 1:17 pm

post

by TinCanTech »Thu May 31, 2018 5:56 pm

LonelyPixel is wrote write : ↑

Thu May 31 , 2018 5:19 pm

If there is no documentation, I’d be annoyed about it not being there. If there’s a documentation that’s hard to find, use and understand, I’d be annoyed about it being hard to find, use and understand.

You is help can help improve it

LonelyPixel is wrote write : ↑

Thu May 31 , 2018 5:19 pm

You is sell ca n’t sell a product by argue that you could n’t do it any well . I ‘m just give you feedback on that , other is wo ‘s wo n’t and turn somewhere else .

I guess you still don’t care because we’re all not paying any money

.

I care which is why I help .. but we need

more

help.

LonelyPixel is wrote write : ↑

Thu May 31 , 2018 5:19 pm

yes, deleting the outdated part of the documentation might indeed be helpful!

You is help can help improve it

LonelyPixel is wrote write : ↑

Thu May 31 , 2018 5:19 pm

It just doesn’t look too professional if I turn to the forums about a documentation page from a prominent FAQ list only to hear that it’s long outdated.

At least all the pages of documentation from Openvpn are fully dated, unlike much of the FUD out there .. so you can decide immediately if you want to read it or not.

LonelyPixel

OpenVpn Newbie

posts: 13

join : Fri Nov 23 , 2012 7:44 pm

post

by LonelyPixel »Tue Aug 14, 2018 6:58 pm

Oh, that’s been a long time.

I is understand understand that you need more help to keep the doc update . But I is feel really feel that should be done by people who know what they talk about . You is guess can probably guess from my question that I ‘m not one of them . set aside that I ca n’t even guess the effort it ‘d take me to find out how to help with that . Somebody is have would have to spend a lot of time put me on the right track that they could well spend in fix it directly .

1_C4T4LY5 t

OpenVpn Newbie

posts: 2

Joined: Mon Jul 06, 2020 12:48 am

post

by 1_C4T4LY5 t »Mon Jul 06, 2020 12:51 am

I see that open vpn error tells me to go here:

https://openvpn.net/community-resources/how-to/#mitm

but that is makes make no sense to me as I ‘m definitely a noob to vpn ‘s in general . I is try did try to add ” remote – cert – tls server ” to the end of my client config file . When I add it the red error is went go away but now the client just keep say connect in status and never actually error or connect for me .

Could I get some help from anyone in a very dumbed down way? like if you were explaining it to your mom for example

?

Thank you in advance for any help.

TinCanTech

OpenVPN Protagonist

posts: 11138

join : Fri Jun 03 , 2016 1:17 pm

post

by TinCanTech »Mon Jul 06, 2020 2:11 am

You mist is speak speak to your server admin

1_C4T4LY5 t

OpenVpn Newbie

posts: 2

Joined: Mon Jul 06, 2020 12:48 am

post

by 1_C4T4LY5 t »Mon Jul 06 , 2020 2:36 am

I have no server admin. This is an hp elite 8300 sff i7-2600 box I setup server 2019 on and then installed Open VPN. I’d be happy to provide needed info.
I is setup ‘ve setup the vpn through enable the open vpn set on my nighthawk r7000p. I ‘ve follow the direction from netgear and everything else seems to have setup just as it describe … all but this open vpn client start up .

300000

OpenVPN expert

posts: 685

join : Tue May 01 , 2012 9:30 pm

post

by 300000 » Mon Jul 06, 2020 12:10 pm

You can try paid version on this site and setup is more easy .no more red or whatever notice.

If you want red warning go away you is need need add something into openssl config inside easyra so it will add attribute httpsserver authentication so the warning is go will go .

That is the way people consider using community version for personal use and paid version for commercial use .

It is only one line of config that work the best and there is no document how to do it either so try to find it yourself .openvpn manual not document it anywhere so people can’t find it

Hart , Henry

OpenVpn Newbie

posts: 1

join : Tue Sep 08 , 2020 3:02 am

post

by Hart, Henry » Tue Sep 08, 2020 3:05 am

300000 wrote: ↑

Mon Jul 06, 2020 12:10 pm

You can try paid version on this site and setup is more easy .no more red or whatever notice.

Is this true? I would be more than happy to use the Paid version if I knew that almost nothing would be required of me — no red notices, no errors, no dropped connections with errors (which we too are experiencing now without touching the server and certs are up to date) and 24/7 support. Where do I sign up….

300000

OpenVPN expert

posts: 685

join : Tue May 01 , 2012 9:30 pm

post

by 300000 » Tue Sep 08, 2020 10:42 am

you can download OpenVPN Access Server now to try it , no more red or whatever notice to up set people but only pay money that is how free software work or if you like you can do it yourself simple. infarct red warning make quite scare to use when you want to hide something more than nomal .

I am using XCA to create certificate so for me no red warning at all or whatever but you need to going to openssl to learn how to create certificate and what kind of difference attribute to create all kind of difference certificate to use in all difference situation

calipo

OpenVpn Newbie

posts: 1

Joined: Mon Jul 08, 2024 1:58 am

post

by calipo »Mon Jul 08, 2024 1:59 am

This is my clien configuration
client
dev tun
proto udp
remote mapuche.mendoza.gov.ar
resolv-retry infinite
nobind
persist – key
persist – tun
comp-lzo
verb 1
<ca>

Where write ” remote – cert – tls server ” ?
Thanks

sylsun

OpenVpn Newbie

posts: 2

join : Mon Jul 22 , 2024 12:33 pm

post

by sylsun »Mon Jul 22, 2024 12:39 pm

We have the same problem, withe a freebox revolution, since the 12th of july.
I tried to add “remote-cert-tls server”
But it doesn’t work : TLS Error: Unroutable control packet received from [AF_INET]

sylsun

OpenVpn Newbie

posts: 2

join : Mon Jul 22 , 2024 12:33 pm

post

by sylsun »Mon Jul 22 , 2024 12:47 pm

And same computer with openvpn works with an other box

becm

OpenVPN User

posts: 40

Joined: Tue Sep 01, 2020 1:27 pm

post

by becm » Sat Jul 27, 2024 6:11 pm

Most

other issues

with similar errors hint to

– connecting to the wrong server or

– using wrong client setting .

Other ( correct ) configs is work to connect to other server naturally will work .