OpenVPN on OpenATV 7.2

[ghostdog]

Is anyone else having issues with Open ATV7.2 and OpenVPN on a ZGemma9Twin? I am running 7.1 and all is well but because it is no longer supported with updates I am trying out 7.2 in another slot. Everything works great except I can't get OpenVPN to connect. Anybody found this too or have a solution?
Cheers
Steve

 

[moshibeth]

Is anyone else having issues with Open ATV7.2 and OpenVPN on a ZGemma9Twin? I am running 7.1 and all is well but because it is no longer supported with updates I am trying out 7.2 in another slot. Everything works great except I can't get OpenVPN to connect. Anybody found this too or have a solution?
Cheers
Steve

Is the vpn working on 7.1

 

[ghostdog]

Is the vpn working on 7.1

Yep, everything fine on 7.1 and previous 6.4, 7.0 etc. Just 7.2 is the problem. I have a feeling it might be a change in SSL and a certificate issue or python support for OpenVPN. Tried the obvious for authentication credentials, openvpnauth, pass.file, manually adding etc but no luck. Have tried different nightly 7.2 downloads and still the same and even did another 7.1 from scratch and worked fine. Seems to be 7.2 :-(

 

[moshibeth]

Yep, everything fine on 7.1 and previous 6.4, 7.0 etc. Just 7.2 is the problem. I have a feeling it might be a change in SSL and a certificate issue or python support for OpenVPN. Tried the obvious for authentication credentials, openvpnauth, pass.file, manually adding etc but no luck. Have tried different nightly 7.2 downloads and still the same and even did another 7.1 from scratch and worked fine. Seems to be 7.2 :-(

Do a full backup on 7.1 then flash and restore 7.2 on a different partition/slot

 

[dsayers2014]

Tested OpenTV 7.2 with purevpn and it seems to work.


Check if your provider configs have been updated

Incase it's relevant OpenTV 7.2 uses OpenSSL 3.07

 

[ghostdog]

Do a full backup on 7.1 then flash and restore 7.2 on a different partition/slot

Done this a few times, still nothing.

 

[ghostdog]

Tested OpenTV 7.2 with purevpn and it seems to work.


Check if your provider configs have been updated

Incase it's relevant OpenTV 7.2 uses OpenSSL 3.07

Don't think it is my provider (Digibit) configs as 7.1 works a treat

 

[dsayers2014]

In one of the configs can you add

tls-cipher "DEFAULT:@SECLEVEL=0"

If this works then digibit need to update configs.

 

[ghostdog]

In one of the configs can you add

tls-cipher "DEFAULT:@SECLEVEL=0"

If this works then digibit need to update configs.

@dsayers2014 That worked. I have got updated configs but still need to add the "TLS-cipher level" bit but it is a fix for now. I can mess around and try to solve it. Cheers

 

[dsayers2014]

I think you can add it to the openssl.cnf so you don't need to edit all (probably not recommended)

etc/ssl/openssl.cnf

I would just edit most used config files

 

[ghostdog]

I think you can add it to the openssl.cnf so you don't need to edit all (probably not recommended)

etc/ssl/openssl.cnf

I would just edit most used config files

Cheers @dsayers2014 you have been a great help with this and your previous stuff for the ZGemma over the years ;-)

 

[dsayers2014]

Cheers @dsayers2014 you have been a great help with this and your previous stuff for the ZGemma over the years ;-)

I'm even more confused now as etc/ssl/openssl.cnf should have the patch by default

+CipherString = DEFAULT@SECLEVEL=0

[openssl] fix some OpenVPN providers not working on OpenATV 7.1 · oe-alliance/oe-alliance-core@34214e5

 

[ghostdog]

Yeh, me too. I uploaded a "new" openssl.cnf and openssl-cnf.patch, even though the "+CipherString" already exists and still not working! I have edited a couple of config files that i use for a work around
Cheers