0

This question already has an answer here:

i'm trying to use openvpn client to connect TLS VPN server

here is my .ovpn file

client
tls-client
dev tun
proto tcp
remote example.com 443
resolv-retry infinite
auth-user-pass    
persist-key
persist-tun 
nobind
#remote-cert-tls server   
tls-version-min 1.2 
ca "/path/pem.pem"
cert "/path/cert.cert"
key "/path/key.key"
verify-client-cert require  
verb 7
route 10.77.80.177/32    

problem is when connecting, client uses SSL instead of TLS (see screenshots below) enter image description here

the correct way is below en

is there anyone to force openvpn client to use TLS ??

marked as duplicate by Gilles, multithr3at3d, vidarlo, ThoriumBR, A. Hersean May 7 at 13:27

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • What kind of server are you attempting to connect to? OpenVPN doesn't support other VPN protocols. – vidarlo May 5 at 19:27
  • 1
    SSL is the same thing as TLS. It's just the old name. – Gilles May 5 at 20:17
  • @vidarlo i was trying to connect palo alto (global protect) vpn, as i understand that openvpn does support SSL vpn, doesn't it? – ikel May 6 at 2:38
  • yes i do know tls is just another name for ssl – ikel May 6 at 2:43
  • @ikel OpenVPN implements one kind of SSL VPN. Palo Alto is a different protocol. They both use SSL/TLS, but they are not compatible. You may want to have a look at OpenConnect, which implements Palo Alto's protocol. – vidarlo May 6 at 8:18
0

You have tls-version-min 1.2 in your configuration file, so you are using TLS. It appears that your logging tools is simply referring to SSLv2, SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, and TLSv1.3 all as simply "SSL". This is technically incorrect, but it's very common. You don't have to worry about SSL-specific vulnreabilities in your application just because the protocol itself has been labeled as SSL.

  • problem is that by using ssl, i cant connect to server. btw, i used wireshark to monitor – ikel May 6 at 2:39
  • 1
    This seems like an XY Problem to me. The question you ask is "How can I configure OpenVPN to use TLS 1.2?" (which is off-topic by the way). The question you actually want to ask is "Why can I not connect to that server with OpenVPN?". – MechMK1 May 6 at 14:42
  • @MechMK1 well, i suspect that TLSv1.2 not being used is the reason why i cannot connect to vpn, so im just trying to figure out why it's not connecting by fixing this first – ikel May 30 at 10:04
  • @ikel Again, it's helpful to state what you are trying to do. – MechMK1 May 30 at 13:14

Not the answer you're looking for? Browse other questions tagged or ask your own question.