Random error on GUI over OpenVPN connection

Lanna

Background: This is a brand new 7100 ordered direct from Netgate.

I am using near identical settings for my clients on both pfSense+ and CE editions. I am only seeing this problem on +

OpenVPN is using 8192 bit encryption for clients, server and CA
I am seeing random SSL_Protocol_Error and the GUI refuses to load. It happens only occasionally and the browser hangs for several minutes. Ping response it normal during the error. Access over WAN IP is normal. This only happens over VPN.

I have attached screenshot of errors thrown by browser.

I have tried toggling the cryptographic options from AES-NI to QAT and back again, the error still happens.
I have tried regenerating GUI CA and certificate, no luck.

I hope someone on the forums can help me find the problem.

Pippin

Have you tried different browsers?

Add

mssfix 1400

to the OpenVPN client config and try again.

Lanna

@pippin If I do that the logs throw the following error. . .

"Options error: option 'mssfix' cannot be used in this context"

Lanna

Actually I think mssfix cannot be pushed, it must be hardcoded into the client config.

Pippin

@pippin said in Random error on GUI over OpenVPN connection:

Have you tried different browsers?

Can you try

tun-mtu 1400

in the client config instead?

Bob.Dig

@lanna Why posting an actual photo?