OpenVPN export not working with Yealink

leegreen

with the V83 firmware versions from yealink the openvpn client export is no longer working

rolling back to V82 works fine

i contacted yealink and got the following response

The new firmware upgraded the openssl from 2.1.0.10 to openssl 2.1.0.11, but the real problem is the path change of the vpn profile in the V83 firmware,

The Yealink directory is to be deleted.

ca /yealink/config/openvpn/keys/ca.crt

So if anyone is trying to use the client export with yealink roll the firmware back to V82 and it will work

Any suggestions on how to fix this will be appriciated

jimp

I can add another Yealink variant to the export package if you can confirm what the new paths should be.

Should the files go in /config/openvpn/keys/ instead of /yealink/config/openvpn/keys for example?

Actually there is already a variant that uses that format, it's labeled T38G (2) under Yealink. Give that a try.

If that works I can change the label to T38G (2) / V83

leegreen

Thank you for the quick reply

I will test the T38G (2) on the full range tomorrow and get back to you and let you know if it is working

leegreen

Hi

Tested to day and the T38G (2) file is working and has been stable for the last couple of hours

Thank you

jimp

OK, I added that label to the button in the export package. I made a couple other changes that were unrelated as well. After we test it for a bit in snapshots it will be made generally available.

leegreen

Great thanks for the update if any testing is needed let me know i have access to most phones to be able to test

BarS_Mutabor

T41P 83 firmware not working OpenVPN
vpn.cnf
....
append-log /tmp/sys.log
...
cat sys.log|grep openvpn:
Wed Aug 22 00:00:09 2018 us=937608 OpenVPN 2.4.2 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] built on Oct 20 2017
/phone/bin/openvpn: symbol lookup error: /phone/bin/openvpn: undefined symbol: SSLeay_version

openvpn not startup from any vpn.cnf:
ca /config/openvpn/keys/ca.crt
......
or
key-directional 1
<ca>
......
not working on 83 formware
and working on 82 firmware

jimp

Those errors look like something entirely different than what was happening in this thread. Start your own new thread and see if anyone has any ideas. You might be better off asking about that openvpn error on an actual Yealink forum and not here.

allxi

This is a config.

client 
setenv SERVER_POLL_TIMEOUT 4 
nobind 
 
remote IP 1194 tcp 

dev tun 
dev-type tun 
ns-cert-type server 
reneg-sec 604800 
sndbuf 100000 
rcvbuf 100000 
auth-retry nointeract 
verb 3 
cipher AES-256-GCM 
ncp-ciphers AES-256-GCM:AES-256-CBC:AES-128-GCM
auth SHA256

ca /config/openvpn/keys/ca.crt 
cert /config/openvpn/keys/phone1.crt
key /config/openvpn/keys/phone1.key