Styjun

Can a new chain significantly improve the riding experience? If yes - what else can?

Why would "an mule" be used instead of "a mule"?

Creating a Master Image to roll out to 30 new Machines Licensing Issues

Will replacing a fake visa with a different fake visa cause me problems when applying for a legal study permit?

How do you build a Dominant 7th chord?

Can the UK veto its own extension request?

My research paper filed as a patent in China by my Chinese supervisor without me as inventor

Insert str into larger str in the most pythonic way

Can I disable a battery powered device by reversing half of its batteries?

Can Boris Johnson request a Brexit extension to November 1st?

Random point on a sphere

What is a realistic time needed to get a properly trained army?

Why is the T-1000 humanoid?

What's is this random file in Macintosh HD? Malicious?

Is there a star over my head?

How to read torque specs off this Nissan service diagram?

Job offer without any details but asking me to withdraw other applications - is it normal?

How do I politely hint customers to leave my store, without pretending to need leave store myself?

Do superluminal worldlines constitute closed time-like curves under the right conditions?

How can I locate a missing person abroad?

Why was "leaping into the river" a valid trial outcome to prove one's innocence?

Have there been any countries that voted themselves out of existence?

Writing a worded mathematical expression

Kingdom Map and Travel Pace

Openvpn is not authorizing client with error tls handshake failed

Validating OpenSSL connections when using transparent negotiationHow does SSL handshake/protocol work if client already has server certificate?Directly Read/Write Handshake data with Memory BIOVerifying SSL client authenticity fails due to SSL3_GET_CLIENT_CERTIFICATE:no certificate returnedUse Client Cert and TLS_RSA_WITH_AES_256_CBC_SHA256 cipher suitePEM file for server authenticationOpenSSL Handshake failure with two sessions and directly connected memory BIO's C#C client with OpenSSL + Java server : javax.net.ssl.SSLHandshakeException: no cipher suites in commonC++ OpenSSL Fails to perform handshake when accepting in non-blocking mode. What is the proper way?How to use CRLs in pyOpenSSL?

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;

0

I have OpenVPN deployed in docker and suddenly OpenVPN is not authorizing to a client to connect to VPN with the error in logs.

TLS: Initial packet from [AF_INET]XX.XXX.XX.XXX:65336, sid=XXXXXXXXX
VERIFY ERROR: depth=0, error=CRL has expired: CN=vpn-test
OpenSSL: error:140360B2:SSL routines:ACCEPT_SR_CERT:no certificate returned
TLS_ERROR: BIO read tls_read_plaintext error
TLS Error: TLS object -> incoming plaintext read error
TLS Error: TLS handshake failed
SIGUSR1[soft,tls-error] received, client-instance restarting

I have not changed anything from the last 3 months and it was working perfectly fine.

docker openssl vpn openvpn

share|improve this question

edited Mar 28 at 9:09

andy_l

asked Mar 28 at 8:58

andy_landy_l

3177 bronze badges

add a comment | 

0

I have OpenVPN deployed in docker and suddenly OpenVPN is not authorizing to a client to connect to VPN with the error in logs.

TLS: Initial packet from [AF_INET]XX.XXX.XX.XXX:65336, sid=XXXXXXXXX
VERIFY ERROR: depth=0, error=CRL has expired: CN=vpn-test
OpenSSL: error:140360B2:SSL routines:ACCEPT_SR_CERT:no certificate returned
TLS_ERROR: BIO read tls_read_plaintext error
TLS Error: TLS object -> incoming plaintext read error
TLS Error: TLS handshake failed
SIGUSR1[soft,tls-error] received, client-instance restarting

I have not changed anything from the last 3 months and it was working perfectly fine.

docker openssl vpn openvpn

share|improve this question

edited Mar 28 at 9:09

andy_l

asked Mar 28 at 8:58

andy_landy_l

3177 bronze badges

add a comment | 

I have OpenVPN deployed in docker and suddenly OpenVPN is not authorizing to a client to connect to VPN with the error in logs.

TLS: Initial packet from [AF_INET]XX.XXX.XX.XXX:65336, sid=XXXXXXXXX
VERIFY ERROR: depth=0, error=CRL has expired: CN=vpn-test
OpenSSL: error:140360B2:SSL routines:ACCEPT_SR_CERT:no certificate returned
TLS_ERROR: BIO read tls_read_plaintext error
TLS Error: TLS object -> incoming plaintext read error
TLS Error: TLS handshake failed
SIGUSR1[soft,tls-error] received, client-instance restarting

I have not changed anything from the last 3 months and it was working perfectly fine.

docker openssl vpn openvpn

share|improve this question

edited Mar 28 at 9:09

andy_l

asked Mar 28 at 8:58

andy_landy_l

3177 bronze badges

TLS: Initial packet from [AF_INET]XX.XXX.XX.XXX:65336, sid=XXXXXXXXX
VERIFY ERROR: depth=0, error=CRL has expired: CN=vpn-test
OpenSSL: error:140360B2:SSL routines:ACCEPT_SR_CERT:no certificate returned
TLS_ERROR: BIO read tls_read_plaintext error
TLS Error: TLS object -> incoming plaintext read error
TLS Error: TLS handshake failed
SIGUSR1[soft,tls-error] received, client-instance restarting

share|improve this question

edited Mar 28 at 9:09

andy_l

asked Mar 28 at 8:58

andy_landy_l

3177 bronze badges

share|improve this question

edited Mar 28 at 9:09

andy_l

asked Mar 28 at 8:58

andy_landy_l

3177 bronze badges

asked Mar 28 at 8:58

andy_landy_l

3177 bronze badges

asked Mar 28 at 8:58

andy_landy_l

3177 bronze badges

1 Answer
1

active

oldest

votes

0

I have not changed anything from the last 3 months and it was working perfectly fine.

That is exactly the problem. In the mean time your CRL expired since you have not renewed it:

VERIFY ERROR: depth=0, error=CRL has expired

share|improve this answer

answered Mar 28 at 9:58

plaisthosplaisthos

4,17966 gold badges2828 silver badges6161 bronze badges

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  I generated crl using this commands and managed to connected again but now when I am ssh to the servers in that VPN it is not working :( docker exec -it your_openven_container easyrsa gen-crl docker exec -it your_openvpn_container cp -f "/etc/openvpn/pki/crl.pem" "/etc/openvpn/crl.pem"
  
  – andy_l
  Mar 28 at 10:31
  
  

  
  
  
  

add a comment | 

Your Answer

StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/4.0/"u003ecc by-sa 4.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55393555%2fopenvpn-is-not-authorizing-client-with-error-tls-handshake-failed%23new-answer', 'question_page');

);

Post as a guest

Name

Email

Required, but never shown

0

I have not changed anything from the last 3 months and it was working perfectly fine.

That is exactly the problem. In the mean time your CRL expired since you have not renewed it:

VERIFY ERROR: depth=0, error=CRL has expired

share|improve this answer

answered Mar 28 at 9:58

plaisthosplaisthos

4,17966 gold badges2828 silver badges6161 bronze badges

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  I generated crl using this commands and managed to connected again but now when I am ssh to the servers in that VPN it is not working :( docker exec -it your_openven_container easyrsa gen-crl docker exec -it your_openvpn_container cp -f "/etc/openvpn/pki/crl.pem" "/etc/openvpn/crl.pem"
  
  – andy_l
  Mar 28 at 10:31
  
  

  
  
  
  

add a comment | 

0

I have not changed anything from the last 3 months and it was working perfectly fine.

That is exactly the problem. In the mean time your CRL expired since you have not renewed it:

VERIFY ERROR: depth=0, error=CRL has expired

share|improve this answer

answered Mar 28 at 9:58

plaisthosplaisthos

4,17966 gold badges2828 silver badges6161 bronze badges

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  I generated crl using this commands and managed to connected again but now when I am ssh to the servers in that VPN it is not working :( docker exec -it your_openven_container easyrsa gen-crl docker exec -it your_openvpn_container cp -f "/etc/openvpn/pki/crl.pem" "/etc/openvpn/crl.pem"
  
  – andy_l
  Mar 28 at 10:31
  
  

  
  
  
  

add a comment | 

I have not changed anything from the last 3 months and it was working perfectly fine.

That is exactly the problem. In the mean time your CRL expired since you have not renewed it:

VERIFY ERROR: depth=0, error=CRL has expired

share|improve this answer

answered Mar 28 at 9:58

plaisthosplaisthos

4,17966 gold badges2828 silver badges6161 bronze badges

VERIFY ERROR: depth=0, error=CRL has expired

share|improve this answer

answered Mar 28 at 9:58

plaisthosplaisthos

4,17966 gold badges2828 silver badges6161 bronze badges

answered Mar 28 at 9:58

plaisthosplaisthos

4,17966 gold badges2828 silver badges6161 bronze badges

answered Mar 28 at 9:58

plaisthosplaisthos

4,17966 gold badges2828 silver badges6161 bronze badges