Bug: Windscribe static servers not working with OpenVPN (openssl related) #2003
Comments
Do you have the initial log line indicating the corresponding git commit, date etc. of Gluetun? |
|
This is all I got for the info on it. I do have it running tho so If I can get it via command inside the container let me know |
|
Yes the log line in the form "Running version latest built on 2020-03-13T01:30:06Z (commit d0f678c)." otherwise it's hard to chase down a now overridden latest image and match it to a certain code git commit hash. |
|
Running version latest built on 2022-05-07T07:18:37.602Z (commit e32d251) |
This comment was marked as off-topic.
This comment was marked as off-topic.
|
https://forums.openvpn.net/viewtopic.php?t=34837 This post is around the same time, something to do with OpenSSL3? I don't know how to go about adding those to gluten the 2nd part looks like it goes in my .ovpn file downloaded from Windscribe but why would they miss something like that for their own server Auth process . . . Thank You |
qdm12
changed the title
|
@easleycorey in your .ovpn file (ideally freshly downloaded), what's the value for:
Regarding |
|
Please open another issue, this issue is about Windscribe. And if you can please also post the |
Those are the same values. Fresh Downloaded |
|
Their certificate (ca) is using I opened a pull request #2016 with the setting |
Still the the error |
|
Both the (old static) and the new one that connect non static IP every 3 hours does a loop of this |
No, although there has been a lot changes since then: e32d251...v3.36.0 The only change directly related to Windscribe is an update of servers data: 5eacb46 Have you tried updating your servers data? See the servers.md page in the Gluetun Wiki on how to do it.
Oh so the new Gluetun does work right? The unhealthy status can happen if connecting to cloudflare.com:443 fails, it is checked every 5 seconds by default. See the health document in the Gluetun Wiki for more information. This is a bit of a self healing system in case the VPN server goes down, which happens quite a bit it turns out. |
|
The current normal image works with windscribe servers if it not static but static doesn't ever work with current image. It stays unhealthy and generates the errors in the starting post. |
|
Sorry I'm a bit confused, what do you mean by static? You mean you picked a specific IP address with The error you have |
|
|
Hope your Holidays were fantastic, sorry for the delay in reply https://windscribe.com/staticips Thank You |
|
I am also having this exact problem. For more context, when you create a static IP with port forwarding in windscribe it gives you a specific IP, username, password, and .ovpn file and tells you it has to be these settings or it won't work. When you place these things into the settings as described in this issue it just loops failing the certificate verify step. edit: You need to set the provider to custom and provide the .ovpn file as the custom config file |
So this is very very likely related to OpenSSL changing from version 1 to 3 (from OpenVPN 2.4 to 2.5) I changed the current Gluetun code to have only Openvpn 2.4 + openssl 1.1, it's built at #2253 with image |
qdm12
changed the title
|
Hello @qdm12 , Environment : Synology DSM 7.2 Update 5 This error does not happen with gluetun:latest . |
|
Same Issue, subbed. |
|
@easleycorey have you had the time to try Also one more question @easleycorey @ryanovas this is only for static windscribe servers correct? Standard servers work fine right? @palijn Please @oriddlero Same issue - what do you mean? have you tried the image |
|
@qdm12 I gotta be honest it's been a little too long for me to remember the details of the issue I was having, but I've had it working for quite some time now and it looks like based on my edit I had something wrong in my configuration? In any case, I've only ever tried using a static IP server with Windscribe, so I can't speak to standard server experience. If it helps I can post my current config? |
|
Thanks for getting back! Ok let's close it due to inactivity, and it might be solved now. Please open another issue if you encounter a similar problem. |
|
Closed issues are NOT monitored, so commenting here is likely to be not seen. This is an automated comment setup because @qdm12 is the sole maintainer of this project |
Is this urgent?
No
Host OS
Diet-Pi
CPU arch
x86_64
VPN service provider
Windscribe
What are you using to run the container
Portainer
What is the version of Gluetun
latest
What's the problem 🤔
I've been using an old build from may 2022, The new images do not work with Windscribe Static IP. I can get the normal servers to work that aren't static but the only way I can get the static to work is with the very old Image from May 2022.
I get this error
2023-12-14T19:09:59Z INFO [openvpn] OpenSSL: error:0A000086:SSL routines::certificate verify failed
2023-12-14T19:09:59Z INFO [openvpn] TLS_ERROR: BIO read tls_read_plaintext error
2023-12-14T19:09:59Z INFO [openvpn] TLS Error: TLS object -> incoming plaintext read error
2023-12-14T19:09:59Z INFO [openvpn] TLS Error: TLS handshake failed
Share your logs (at least 10 lines)
Share your configuration
The text was updated successfully, but these errors were encountered: