[quote] Asus router openvpn server can’t be connected

In asus router, after enabling openvpn server and exported the connection configurate file, the client can’t connect to the router. Error was:

TLS_ERROR: BIO read tls_read_plaintext error: error:14082174:SSL routines:SSL3_CHECK_CERT_AND_ALGORITHM:dh key too small

Solution here:

http://www.snbforums.com/threads/asus-rt-87u-merlin-openvpn-server-fails-diffie-helmann-dh-key-too-small.25326/

#0 Make sure your router has the correct TIME.
#1 in linux run: openssl dhparam -out dhparams.pem 2048
#2 in the ASUS RT-* go to /Advanced_VPN_OpenVPN.asp and change it to “advanced” on the dropdown
#3 click Content modification of Keys & Certification. Copy Paste your dhparams.pem content into “Diffie Hellman parameters”
#4 Hit Apply. Your clients should reconnect

 

pswzyu : after #3, I also exported the ovpn file again and then did #4

 

此条目发表在 服务器 分类目录。将固定链接加入收藏夹。

发表评论

电子邮件地址不会被公开。 必填项已用*标注

您可以使用这些HTML标签和属性: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>