pfSense » pfSense Packages

Talking about Openvpn export.

Any OpenVPN 2.3-based client will work, which is most of them now. Or it should be.

Aside from older Phones (e.g. Yealink/Snom) and maybe DD-WRT firmwares, clients should be running 2.3-based in most cases. The tls-remote option has been deprecated by OpenVPN so the correct fix is to update your client where possible. The phones should already have this option excluded from their config in the latest client export package version.

It works OK on Android, iOS, Tunnelblick (make sure to set your profile to use OpenVPN 2.3.x), Viscosity, Windows, etc.

I can look into adding this as a choice, but it may be a few days.

It's OpenWRT and DD-WRT yes. Some LTS linux distributions are also working on 2.2.

Did you actually choose the option to use tls-remote when exporting after updating the package? "auto" will only use verify-x509-name except in a few other cases, you'll have to manually pick the choice for tls-remote.

If it still doesn't work properly and you chose the correct export option, start a forum thread to discuss rather than debugging here on the ticket.

http://forum.pfsense.org/index.php/topic,69219.0.html

FYI- a file apparently didn't get into my final commit, but it's there now.

All OK. Thanks!