I also can't configure OpenVPN on Mikrotik hAP ac RB962UiGS-5HacT2HnT (mipsbe) ![:?]( "Confused")
I tried different firmware from 7.16.2 to 7.18.2 (stable).
Router logs:
Server logs:
…lines appear every second.
The problem is popular, but no solution could be found.
I connect from ancient Asus and Kinetic; from new iOS, Android, Windows, MacOS - it works great everywhere.
Server version OpenVPN 2.4.12 x86_64-redhat-linux-gnu built on Nov 10 2023
Import config.ovpn of course does not work. I did not understand how to import a tls-crypt (tc.key) certificate to Mikrotik.
The client certificate and key have been imported and the status is “KT” (private key, trusted).
Working [ClientConfig.ovpn]
![Image]()
![Image]()
ver 7.16.2
I tried different firmware from 7.16.2 to 7.18.2 (stable).
Router logs:
Code:
Mikrotik disconnected <TLS error: handshake timed out (6)>Code:
$ tail -f /var/log/openvpn/openvpn.logtls-crypt unwrap error: packet too shortTLS Error: tls-crypt unwrapping failed from [AF_INET]92.238.16.3:13217The problem is popular, but no solution could be found.
I connect from ancient Asus and Kinetic; from new iOS, Android, Windows, MacOS - it works great everywhere.
Server version OpenVPN 2.4.12 x86_64-redhat-linux-gnu built on Nov 10 2023
Import config.ovpn of course does not work. I did not understand how to import a tls-crypt (tc.key) certificate to Mikrotik.
The client certificate and key have been imported and the status is “KT” (private key, trusted).
Working [ClientConfig.ovpn]
Code:
dev tunclientproto upexplicit-exit-notify 1remote vpn.server.ru 12345resolv-retry infinitenobindtls-clientremote-cert-tls serverauth SHA256cipher AES-256-CBCverb 3pulluser openvpngroup openvpnpersist-keypersist-tunexplicit-exit-notifytun-mtu 1420<ca>-----BEGIN CERTIFICATE-----XXXXXXEND CERTIFICATE-----</ca><cert>-----BEGIN CERTIFICATE-----XXXXXX-----END CERTIFICATE-----</cert><key>-----BEGIN PRIVATE KEY-----XXXXXX-----END PRIVATE KEY-----</key><tls-crypt>## 2048 bit OpenVPN static key#-----BEGIN OpenVPN Static key V1-----XXXXXX-----END OpenVPN Static key V1-----</tls-crypt>
ver 7.16.2
Statistics: Posted by ilya7zz — Thu Mar 13, 2025 10:59 pm
