No server certificate verification method has been enabled как исправить

When connecting to my OpenVPN server, I get this message on the client in red colour:

WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.

I have read that page and acknowledged it. The certificates already have the appropriate settings. How can I make this red line go away?

The HOWTO wrote:Now add the following line to your client configuration:

remote-cert-tls server

LonelyPixel wrote: ↑

Thu May 31, 2018 12:53 pm

or I was already in that «stupid documentation» mood.

Would you prefer there not to be documentation ?

People put a lot of effort into writing it .. but we can delete it all if you prefer

If there is no documentation, I’d be annoyed about it not being there. If there’s a documentation that’s hard to find, use and understand, I’d be annoyed about it being hard to find, use and understand. Please understand that incomplete efforts cannot beat psychology. You can’t sell a product by arguing that you couldn’t do it any better. I’m just giving you feedback on that, other’s won’t and turn somewhere else. I guess you still don’t care because we’re all not paying any money.

And yes, deleting the outdated part of the documentation might indeed be helpful! It just doesn’t look too professional if I turn to the forums about a documentation page from a prominent FAQ list only to hear that it’s long outdated. You see where my impression comes from?

LonelyPixel wrote: ↑

Thu May 31, 2018 5:19 pm

If there is no documentation, I’d be annoyed about it not being there. If there’s a documentation that’s hard to find, use and understand, I’d be annoyed about it being hard to find, use and understand.

You can help improve it

LonelyPixel wrote: ↑

Thu May 31, 2018 5:19 pm

You can’t sell a product by arguing that you couldn’t do it any better. I’m just giving you feedback on that, other’s won’t and turn somewhere else. I guess you still don’t care because we’re all not paying any money.

I care which is why I help .. but we need more help.

LonelyPixel wrote: ↑

Thu May 31, 2018 5:19 pm

yes, deleting the outdated part of the documentation might indeed be helpful!

You can help improve it

LonelyPixel wrote: ↑

Thu May 31, 2018 5:19 pm

It just doesn’t look too professional if I turn to the forums about a documentation page from a prominent FAQ list only to hear that it’s long outdated.

At least all the pages of documentation from Openvpn are fully dated, unlike much of the FUD out there .. so you can decide immediately if you want to read it or not.

Oh, that’s been a long time.

I understand that you need more help to keep the docs updated. But I really feel that should be done by people who know what they talk about. You can probably guess from my questions that I’m not one of them. Set aside that I can’t even guess the effort it’d take me to find out how to help with that. Somebody would have to spend a lot of time putting me on the right track that they could better spend in fixing it directly.

I see that open vpn error tells me to go here: https://openvpn.net/community-resources/how-to/#mitm
but that makes no sense to me as I’m definitely a noob to vpn’s in general. I did try to add «remote-cert-tls server» to the end of my client config file. When I added it the red error went away but now the client just keeps saying connecting in status and never actually errors or connects for me.

Could I get some help from anyone in a very dumbed down way? like if you were explaining it to your mom for example ?

Thank you in advance for any help.

You can try paid version on this site and setup is more easy .no more red or whatever notice.

If you want red warning go away you need adding something into openssl config inside easyras so it will adding attribute httpsserver authentication so the warning will go.

That is the way people consider using community version for personal use and paid version for commercial use .

It is only one line of config that work the best and there is no document how to do it either so try to find it yourself .openvpn manual not document it anywhere so people can’t find it

300000 wrote: ↑

Mon Jul 06, 2020 12:10 pm

You can try paid version on this site and setup is more easy .no more red or whatever notice.

Is this true? I would be more than happy to use the Paid version if I knew that almost nothing would be required of me — no red notices, no errors, no dropped connections with errors (which we too are experiencing now without touching the server and certs are up to date) and 24/7 support. Where do I sign up….

you can download OpenVPN Access Server now to try it , no more red or whatever notice to up set people but only pay money that is how free software work or if you like you can do it yourself simple. infarct red warning make quite scare to use when you want to hide something more than nomal .

I am using XCA to create certificate so for me no red warning at all or whatever but you need to going to openssl to learn how to create certificate and what kind of difference attribute to create all kind of difference certificate to use in all difference situation

Hi, I’ve got a new Orbi router (Model RBR20) and two satellites.  The router’s firmware is V2.1.4.16.  I enabled OpenVPN on the Orbi router and it works fine with my mobile device.  When I use OpenVPN with my Windows 10 laptop, however, I get this warning message in the OpenVPN client log:

WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.

Visting the URL doesn’t do a lot of good.  There aren’t a lot of configuration settings for OpenVPN on the Orbi Advanced Settings / VPN Service menu option.  It lets me enable OpenVPN and little else, nothing to do with server certification verification.

The OpenVPN client for Windows is the latest available (V2.4.6).

What can I do, if anything, so this warning message doesn’t appear (and the implicit risk is properly mitigated)?

Re: OpenVPN warning: No server certificate verification method has been enabled

try adding 

remote-cert-tls server

to the end of your config file that should remove the warning

Re: OpenVPN warning: No server certificate verification method has been enabled

@DarrenM

@Christian_R

My Setup | ISP SparkLight | Internet Cable 1000↓/50↑ CAX80 Modem Mode |  Wifi Router MK83+ (Router Mode) | and RBK853 (Router Mode) | Switches NG GS105/8, GS308v3, GS110MX and XS505M | Additional NG HW: C7800/CAX80/CM1100/CM1200/CM2000, Orbi: CBK40, CBK752, RBK50, RBK853, RBK752, RBK953, SXK30 | NightHawk: MK63, MR6150, R7000, R7800, R7960P, R8000, R8500, R9000, RAXE500, RAX50, XR450, XR1000, EX7500/EX7700

Re: OpenVPN warning: No server certificate verification method has been enabled

Re: OpenVPN warning: No server certificate verification method has been enabled

Thanks, Christian.

When the Orbi router does it auto-check for new firmware, it says it’s already up-to-date (on V2.1.4.16).

Any downside to upgrading the firmware using your provided link? If I wanted to downgrade the firmware back to 2.1.4.16 (if something is screwy with the newer firmware version), is that possible?

And this wouldn’t require updating the firmware on the two satellites, would it?

Re: OpenVPN warning: No server certificate verification method has been enabled

It’s recommended to manually download the FW files and then update the Satellites first, then the router. Please use a wired LAN cable connected PC or laptop for this operation.

My Setup | ISP SparkLight | Internet Cable 1000↓/50↑ CAX80 Modem Mode |  Wifi Router MK83+ (Router Mode) | and RBK853 (Router Mode) | Switches NG GS105/8, GS308v3, GS110MX and XS505M | Additional NG HW: C7800/CAX80/CM1100/CM1200/CM2000, Orbi: CBK40, CBK752, RBK50, RBK853, RBK752, RBK953, SXK30 | NightHawk: MK63, MR6150, R7000, R7800, R7960P, R8000, R8500, R9000, RAXE500, RAX50, XR450, XR1000, EX7500/EX7700

Re: OpenVPN warning: No server certificate verification method has been enabled

@famousdavis, 

There would be no downside using the link to upgrade your firmware and yes, you will be able to downgrade back if necessary by clicking on the various firmware versions in the link provided. 

It is not required to update the firmware on the satellites but as always, upgrading to the latest firmware is recommended. 

Regards, 

Christian 

Re: OpenVPN warning: No server certificate verification method has been enabled

Does the same firmware download work for both the Orbi router and its connected satellites? Eg, the satellites don’t get their own special firmware, correct?

If I recall, the same Orbi model number is used to identify both the Orbi router and the Orbi satellites, both. I’m inferring from your last post that I could use the firmware update on both the router and its satellites.

I’ll try this out tonight and report back whatever I learn.

Re: OpenVPN warning: No server certificate verification method has been enabled

There will be separate files for the router and satellites.

My Setup | ISP SparkLight | Internet Cable 1000↓/50↑ CAX80 Modem Mode |  Wifi Router MK83+ (Router Mode) | and RBK853 (Router Mode) | Switches NG GS105/8, GS308v3, GS110MX and XS505M | Additional NG HW: C7800/CAX80/CM1100/CM1200/CM2000, Orbi: CBK40, CBK752, RBK50, RBK853, RBK752, RBK953, SXK30 | NightHawk: MK63, MR6150, R7000, R7800, R7960P, R8000, R8500, R9000, RAXE500, RAX50, XR450, XR1000, EX7500/EX7700

Re: OpenVPN warning: No server certificate verification method has been enabled

Re: OpenVPN warning: No server certificate verification method has been enabled

Re: OpenVPN warning: No server certificate verification method has been enabled

My Setup | ISP SparkLight | Internet Cable 1000↓/50↑ CAX80 Modem Mode |  Wifi Router MK83+ (Router Mode) | and RBK853 (Router Mode) | Switches NG GS105/8, GS308v3, GS110MX and XS505M | Additional NG HW: C7800/CAX80/CM1100/CM1200/CM2000, Orbi: CBK40, CBK752, RBK50, RBK853, RBK752, RBK953, SXK30 | NightHawk: MK63, MR6150, R7000, R7800, R7960P, R8000, R8500, R9000, RAXE500, RAX50, XR450, XR1000, EX7500/EX7700

Re: OpenVPN warning: No server certificate verification method has been enabled

After downloading the latest f/w update for the Orbi router (v2.2.0.68), I’ve decided to forestall doing anything right now to my Orbi system.

The router’s f/w update doesn’t disclose what’s been changed in the release notes.  And the f/w is only for the RBR20 router, not the RBS20 satellites.  The Netgear support site for the satellites still shows that f/w v2.1.4.16 is the latest. 

It seems based upon my poking around and watching a few videos on the Netgear support site that it’s best to keep the router and satellites on the same f/w version, so I’m hesitant to change the f/w right now to address my issue on the router, as that would put it out-of-sync with the f/w used by the satellites.  Maybe it’s not an issue at all, but I won’t know that unless I tamper with a very stable network configuration.

And since the router’s f/w release date was literally just a few days ago, I’d rather not be one of the first out of the gate.  Having a stable network is a top priority for me more than addressing my OpenVPN warning.

I’ll monitor the discussion chatter here and see if others have a similar warning as I’ve got, and if a firmware update specifically fixes that warning condition (and the MITM threat leading to the warning).

Thanks for your timely reply to my question!  Great forum! 

Re: OpenVPN warning: No server certificate verification method has been enabled

Well since this post is related to certificate verification, the router only needs updating. Hoping the new FW resolves that for you. Let us know…

My Setup | ISP SparkLight | Internet Cable 1000↓/50↑ CAX80 Modem Mode |  Wifi Router MK83+ (Router Mode) | and RBK853 (Router Mode) | Switches NG GS105/8, GS308v3, GS110MX and XS505M | Additional NG HW: C7800/CAX80/CM1100/CM1200/CM2000, Orbi: CBK40, CBK752, RBK50, RBK853, RBK752, RBK953, SXK30 | NightHawk: MK63, MR6150, R7000, R7800, R7960P, R8000, R8500, R9000, RAXE500, RAX50, XR450, XR1000, EX7500/EX7700

Re: OpenVPN warning: No server certificate verification method has been enabled

Hi all,

My curiosity got the best of me, so tonight I upgraded the RBR20 router to the latest firmware, v2.2.0.68.  After the firmware update successfully applied and my Internet connection restored, I disconnected my laptop from my home network and connected it to my mobile phone’s hotspot, so I could establish an OpenVPN connection outside my home’s network.

I connected to my hotspot fine, started OpenVPN just fine, but, alas, I get the same warning message:  «No server certificate verification method has been enabled.»

The latest router firmware doesn’t resolve this issue. 

Re: OpenVPN warning: No server certificate verification method has been enabled

Re: OpenVPN warning: No server certificate verification method has been enabled

Re: OpenVPN warning: No server certificate verification method has been enabled

@Christian_R

@Blanca_O

My Setup | ISP SparkLight | Internet Cable 1000↓/50↑ CAX80 Modem Mode |  Wifi Router MK83+ (Router Mode) | and RBK853 (Router Mode) | Switches NG GS105/8, GS308v3, GS110MX and XS505M | Additional NG HW: C7800/CAX80/CM1100/CM1200/CM2000, Orbi: CBK40, CBK752, RBK50, RBK853, RBK752, RBK953, SXK30 | NightHawk: MK63, MR6150, R7000, R7800, R7960P, R8000, R8500, R9000, RAXE500, RAX50, XR450, XR1000, EX7500/EX7700

Re: OpenVPN warning: No server certificate verification method has been enabled

@famousdavis, 

Thank you for providing an update on your issue. I have sent you a message. Please respond at your earliest convenience. 

~Christian 

Re: OpenVPN warning: No server certificate verification method has been enabled

@Ocsig,

I have sent you a message. Please check your inbox.

~Christian 

Re: OpenVPN warning: No server certificate verification method has been enabled

@d-One

Thank you for reaching out to us with expressing a similar issue as others. I have sent you a message. 

~Christian 

Re: OpenVPN warning: No server certificate verification method has been enabled

Re: OpenVPN warning: No server certificate verification method has been enabled

I’m also having this issue, I’m on firmware 2.2.1.210.  Can anyone provide any insight into how I can fix the issue w/ Windows 10?

Works fine on Android.  I’ve tried downgranding OVPN to the earlier stable release, but that didn’t fix the problem either.

Re: OpenVPN warning: No server certificate verification method has been enabled

Hi,

I’m having the same issue. I can connect via my iphone but not Win 10. Installed the latest firmware, but that’s made no difference. Is it something in the formatting of the ovpn file?

Thanks

Re: OpenVPN warning: No server certificate verification method has been enabled

@Blanca_O

@Christian_R

My Setup | ISP SparkLight | Internet Cable 1000↓/50↑ CAX80 Modem Mode |  Wifi Router MK83+ (Router Mode) | and RBK853 (Router Mode) | Switches NG GS105/8, GS308v3, GS110MX and XS505M | Additional NG HW: C7800/CAX80/CM1100/CM1200/CM2000, Orbi: CBK40, CBK752, RBK50, RBK853, RBK752, RBK953, SXK30 | NightHawk: MK63, MR6150, R7000, R7800, R7960P, R8000, R8500, R9000, RAXE500, RAX50, XR450, XR1000, EX7500/EX7700

Re: OpenVPN warning: No server certificate verification method has been enabled

Hi @ryoung81 and @Retired_Member 

I have sent you a message. Please check your inbox.

Regards, 
Blanca 
Community Team

sila31regiona

не подключаеться OPENVPN вожу логин пароль,через терминал выдает ошибку:

…
No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sat Nov 12 20:02:57 2016 NOTE: —fast-io is disabled since we are not using UDP
Sat Nov 12 20:02:57 2016 Socket Buffers: R=[87380->87380] S=[16384->16384]
Sat Nov 12 20:02:57 2016 Attempting to establish TCP connection with [AF_INET]212.129.33.61:80 [nonblock]
…

перевод :

…
Ни один метод проверки сервера сертификат не был включен. Смотрите http://openvpn.net/howto.html#mitm для получения дополнительной информации.
Сб 12 ноября 20:02:57 2016 Примечание: —fast-IO отключена, так как мы не используем UDP
Сб 12 ноября 20:02:57 2016 Торцевые Буферы: R = [87380-> 87380] S = [16384-> 16384]
Сб 12 ноября 20:02:57 2016 Попытка установить соединение TCP с [AF_INET] 212.129.33.61:80 [NONBLOCK]
…


и как теперь подключиться к VPN если они перестали использовать UDP и TCP

помогите решить проблему

ТС не появлялся на Форуме более полугода по состоянию на 22/07/2019 (последняя явка: 26/05/2017). Модератором раздела принято решение закрыть тему.
—zg_nico

« Последнее редактирование: 22 Июля 2019, 14:56:18 от zg_nico »

_»№%:?*()_+

Длиннорогий

Длиннорогий

Если недоступен udp, попробуйте tcp.

nano /etc/openvpn/client.confили где у вас лежит конфиг. Разкоментить строку tcp, закоментить udp.

/etc/init.d/openvpn restartсмотреть, что выйдет.

sila31regiona

смотри скачиваю архив с .ovpn

https://freevpn.me/accounts/

распаковываю открываю терминал в папке с файлами

в терминале пишу ls показывает содержимое папки

далее прописываю openvpn FreeVPN.me-TCP80.ovpn

нажимаю интер и высвечивается

Sat Nov 12 21:16:06 2016 OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Feb  2 2016
Sat Nov 12 21:16:06 2016 library versions: OpenSSL 1.0.2g  1 Mar 2016, LZO 2.08
Enter Auth Username: Вожу сюда freevpnme

жму интер

Enter Auth Password: Сюда вожу пароль 0jnyTti8E

далее вижу это:

Вот что находиться в файле FreeVPN.me-TCP80.ovpn :

Пользователь добавил сообщение 12 Ноября 2016, 22:38:09:

///////////////////////////////////////////////////////////////////////////////

                                                                            подключил VPN ну только другим способом и на много дольше вот так :

                                                                            https://www.youtube.com/watch?v=196_HoLIDIA

                                                                            ///////////////////////////////////////////////////////////////////////////////
 
{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{

а хотелось бы по старинке через терминал,намного быстрее))

https://www.youtube.com/watch?v=Lp5vT4sGXmI
 
}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}

« Последнее редактирование: 12 Ноября 2016, 22:38:09 от sila31regiona »

_»№%:?*()_+

Multik001

EvangelionDeath

смотри

Посмотрели. Но вы видать лог сами то и не читали? А там написано:

Sat Nov 12 21:25:32 2016 AUTH: Received control message: AUTH_FAILED

Не, я понимаю, новичек и все такое. Но, читать лог Вы и сами могли, не созывая консилиум. Если Вы до сих пор смотрите непонимающими глазами — обращайтесь в службу поддержки сервиса ибо данные вторизации невалидны, соответственно проблема не в OpenVPN.

У меня нет права закрыть тему, потому подождем.

Multik001

А в чем же может быть проблема? Провайдер блокирует VPN (МГТС это еще то г…) или сам https://freevpn.me дал попользоваться часов 5 и все…
С последними событиями про Телеграмм и РКН сейчас куча новичков лезут в эту тему VPN, но сталкиваются с кучей проблем… Первое что в youtube попадается это видео https://www.youtube.com/watch?v=Lp5vT4sGXmI и при первой настройке все работает отлично, но потом происходит сбой и подключиться больше не получается(((
Позже попробую на чистой системе, отпишусь.

Пользователь добавил сообщение 20 Апреля 2018, 16:46:35:

Попробовал на чистой системе результат тот же((
Подскажите в чем может быть проблема?

EvangelionDeath