OpenVPN TLS Unsupported protocol

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

OpenVPN TLS Unsupported protocol

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
OpenVPN TLS Unsupported protocol
OpenVPN TLS Unsupported protocol
2023-05-21 08:45:07 - last edited 2023-05-21 08:47:02
Model: Archer VR1210v  
Hardware Version: V1
Firmware Version: Archer_VR1200v(SP)v1_1.0.0 0.8.0 v600e.0 Build 220626 Rel.52987n

Hello

 

Im having troubles connecting to my VR1200V HARDWARE VERSIONE V1 and using OpenVPN

I have setup a DYNDNS dynamic redirection and enabled OpenVPN server, then generated the certs and downloaded them.

 

Once I try to connect, it gives me the following error:

2023-05-21 10:28:44 TLS: Initial packet from [AF_INET]MY IP: MY PORT, sid=b37a9a24 a209f3ff
2023-05-21 10:28:44 TLS error: Unsupported protocol. This typically indicates that client and server have no common TLS version enabled. This can be caused by mismatched tls-version-min and tls-version-max options on client and server. If your OpenVPN client is between v2.3.6 and v2.3.2 try adding tls-version-min 1.0 to the client configuration to use TLS 1.0+ instead of TLS 1.0 only
2023-05-21 10:28:44 OpenSSL: error:0A000102:SSL routines::unsupported protocol
2023-05-21 10:28:44 TLS_ERROR: BIO read tls_read_plaintext error
2023-05-21 10:28:44 TLS Error: TLS object -> incoming plaintext read error
2023-05-21 10:28:44 TLS Error: TLS handshake failed

 

Then the process is restarted but it fails to connect.

 

Any solutions would be greatly apreciated.

 

Ps.

  1. The model correct is VR1200V V1, this model isn't present into model menù.
  2. I try add tls-version-min into client config.. it don't work. 

 

  0      
  0      
#1
Options
5 Reply
Re:OpenVPN TLS Unsupported protocol
2023-05-22 09:52:41

  @Siedrosat 

 

Hi, when you change the minimum TLS version on the VPN client, did you change it to TLS 1.0?

Please share with us the screenshot as well.

 

Besides, may I have the version of your OpenVPN Client software? and you are using smartphone or computer to connect the OpenVPN?

Nice to Meet You in Our TP-Link Community. Check Out the Latest Posts: Archer GE550 - BE9300 Tri-Band Wi-Fi 7 Gaming Router EasyMesh Is Available When Wi-Fi Routers Work in AP Mode as A Controller. Archer BE550 New Software Enhances System Stability and Optimizes MLO Network Stability. TL-WA3001 Supports EasyMesh, Speed Limit, Guest Network in AP Mode and/or Multi-SSID Mode. If you found the post or response helpful, please click Helpful. If an answer solves your problem, click "Recommended Solution" so that others can benefit from it.
  0  
  0  
#2
Options
Re:OpenVPN TLS Unsupported protocol
2023-05-22 10:04:50 - last edited 2023-05-22 10:07:41

 

Sunshine wrote

  @Siedrosat 

 

Hi, when you change the minimum TLS version on the VPN client, did you change it to TLS 1.0?

 

Please share with us the screenshot as well.

 

Besides, may I have the version of your OpenVPN Client software? and you are using smartphone or computer to connect the OpenVPN?


 

 

   @Sunshine  Yes this is my configuration:

 

client
dev tun
proto udp
float
nobind
cipher AES-128-CBC
comp-lzo adaptive
resolv-retry infinite
persist-key
persist-tun
verb 3
remote my ip public 60505
tls-version-min 1.0

 

I'm using the pc client Ver 2.6.4

  0  
  0  
#3
Options
Re:OpenVPN TLS Unsupported protocol
2023-05-24 01:59:08

  @Siedrosat 

 

Hi, thanks for the reply, may I know if you've tried any older version OpenVPN client such as 2.5.x? is it still the same error when connecting the OpenVPN?

 

In addition, please help to collect the following information:

1. Your ISP name, is it ADSL or VDSL line?

2. Please verify if the modem Internet IP address on Advanced->Status page is a public IP and the same as the one resolved by DDNS domain name

3. Screenshot of your OpenVPN Server settings

Nice to Meet You in Our TP-Link Community. Check Out the Latest Posts: Archer GE550 - BE9300 Tri-Band Wi-Fi 7 Gaming Router EasyMesh Is Available When Wi-Fi Routers Work in AP Mode as A Controller. Archer BE550 New Software Enhances System Stability and Optimizes MLO Network Stability. TL-WA3001 Supports EasyMesh, Speed Limit, Guest Network in AP Mode and/or Multi-SSID Mode. If you found the post or response helpful, please click Helpful. If an answer solves your problem, click "Recommended Solution" so that others can benefit from it.
  0  
  0  
#4
Options
Re:OpenVPN TLS Unsupported protocol
2023-05-24 08:08:21 - last edited 2023-05-24 08:09:22

Sunshine wrote

  @Siedrosat 

 

Hi, thanks for the reply, may I know if you've tried any older version OpenVPN client such as 2.5.x? is it still the same error when connecting the OpenVPN?

 

In addition, please help to collect the following information:

1. Your ISP name, is it ADSL or VDSL line?

2. Please verify if the modem Internet IP address on Advanced->Status page is a public IP and the same as the one resolved by DDNS domain name

3. Screenshot of your OpenVPN Server settings

  @Sunshine 

Hi,

1) ISP FASTWEB ITALY FWA 5G with public and static ip 

2) Ip Static e public

3)

Server Config

4) With android app the vpn work well with the same isp and configuration.

5) With Windows 10 and older Version 2.5.7 work well.

  0  
  0  
#5
Options
Re:OpenVPN TLS Unsupported protocol
2023-05-25 08:28:29

  @Siedrosat 

 

Hi, on the Windows computer, could you please try using OpenVPN Connect 3.3.4 to connect the OpenVPN Sever? 

Based on our tests, it works fine when using OpenVPN Connect 3.3.4.

Nice to Meet You in Our TP-Link Community. Check Out the Latest Posts: Archer GE550 - BE9300 Tri-Band Wi-Fi 7 Gaming Router EasyMesh Is Available When Wi-Fi Routers Work in AP Mode as A Controller. Archer BE550 New Software Enhances System Stability and Optimizes MLO Network Stability. TL-WA3001 Supports EasyMesh, Speed Limit, Guest Network in AP Mode and/or Multi-SSID Mode. If you found the post or response helpful, please click Helpful. If an answer solves your problem, click "Recommended Solution" so that others can benefit from it.
  0  
  0  
#6
Options