openvpn sha1 client not working after update
-
Hello,
After upgrading pfsense firewall from 2.5.0 to 2.7.2 my OpenVPN with only client who has auth sha1 are not able to connect. some who has auth sha256 is working fine. And I did not do any modifications. It was like that since beginning.
I tried so many things but non working. Can some one help me here please ?
Thanks
-
Sure.
"SHA1" isn't, afaik, not depreciated or even forbidden, as it shows up as an option in the GUI.Do read this : HEADS UP: OpenVPN deprecating shared key mode, requires TLS, deprecating cipher selection because you've skipped over a lot of small and big security issues.
It's possible that you have to re generate an OpenVPN client export file as the OpenVPN client side was probably updated several versions already.
The idea is that you keep versions used on both sides nearly identical.Can you tell more about your OpenVPN server setup ?
And of course, shows the OpenVPN logs. It doesn't matter if you can understand them. Maybe we do ^^ so we can tell you what's up.
-
@ermilan2309
If you need and don't want to throw the hardware in the trash (the manufacturer forgot to update their product, for example Yealink).
Use Custom options on server:
tls-cert-profile insecure
