老毛子新的固件为啥连不上爱快的openvpn

杰***

20年的固件可以直接连接，更新到这个月的固件就连接不了了，是兼容问题还是需要修改配置，老版本的固件默认参数可以直接连接。

jj***

看日志，老毛子 和爱快里的日志都看一下，有没有显示什么错误信息

杰***

jjit 发表于 2023-3-28 10:39
看日志，老毛子 和爱快里的日志都看一下，有没有显示什么错误信息

ar 28 10:53:33 MI-3: starting OpenVPN client...
Mar 28 10:53:33 openvpn-cli[28570]: WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
Mar 28 10:53:33 openvpn-cli[28570]: DEPRECATED OPTION: ncp-disable. Disabling cipher negotiation is a deprecated debug feature that will be removed in OpenVPN 2.6
Mar 28 10:53:33 openvpn-cli[28570]: DEPRECATED OPTION: --cipher set to 'BF-CBC' but missing in --data-ciphers (CHACHA20-POLY1305:AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'BF-CBC' to --data-ciphers or change --cipher 'BF-CBC' to --data-ciphers-fallback 'BF-CBC' to silence this warning.
Mar 28 10:53:33 openvpn-cli[28622]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Mar 28 10:53:33 openvpn-cli[28622]: WARNING: INSECURE cipher (BF-CBC) with block size less than 128 bit (64 bit).  This allows attacks like SWEET32.  Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC). Support for these insecure ciphers will be removed in OpenVPN 2.6.

杰***

2023 Mar 28 Tue 11:05:16
WARNING: Using --management on a TCP port WITHOUT passwords is STRONGLY discouraged and considered insecure

2023 Mar 28 Tue 11:05:16
WARNING: POTENTIALLY DANGEROUS OPTION --verify-client-cert none|optional (or --client-cert-not-required) may accept clients which do not present a certificate

2023 Mar 28 Tue 11:05:16
OpenVPN 2.4.7 x86_64-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]

2023 Mar 28 Tue 11:05:16
library versions: OpenSSL 1.0.2u 20 Dec 2019, LZO 2.10

2023 Mar 28 Tue 11:05:16
NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2023 Mar 28 Tue 11:05:16
TUN/TAP device sovpn opened

2023 Mar 28 Tue 11:05:16
/sbin/ifconfig sovpn 10.7.7.1 netmask 255.255.255.0 mtu 1500 broadcast 10.7.7.255

2023 Mar 28 Tue 11:05:16
Could not determine IPv4/IPv6 protocol. Using AF_INET

2023 Mar 28 Tue 11:05:16
UDPv4 link local (bound): [AF_INET][undef]:1194

2023 Mar 28 Tue 11:05:16
UDPv4 link remote: [AF_UNSPEC]

2023 Mar 28 Tue 11:05:16
Initialization Sequence Completed

1215***

之前我也这样连接，后来放弃了。 不能互访比较麻烦。 后来换了 softether

nam***

老毛子上改一下加密算法试试

mazim***

为何不用ss-Server