Page 1 of 1

It is impossible to connect from Android. Cipher AES-256-CBC:AES-192-CBC:AES-128-CBC not supported

Posted: Mon Jan 27, 2025 6:02 pm
by gfgdfgfdg
I use 'OpenVPN for Android' but it doesn't matter what I try. I always get this error.

cipher
data-ciphers
ncp-ciphers
don't work

https://f-droid.org/packages/de.blinkt.openvpn/

Code: Select all

2025-01-27 18:54:56 OpenVPN 2.7-icsopenvpn [git:icsopenvpn/v0.7.54-0-gee0100b4] arm64-v8a [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Dec  4 2024
2025-01-27 18:54:56 library versions: OpenSSL 3.4.0 22 Oct 2024, LZO 2.10
2025-01-27 18:54:56 MANAGEMENT: Connected to management server at /data/user/0/de.blinkt.openvpn/cache/mgmtsocket
2025-01-27 18:54:56 MANAGEMENT: CMD 'version 3'
2025-01-27 18:54:56 MANAGEMENT: CMD 'hold release'
2025-01-27 18:54:56 MANAGEMENT: CMD 'proxy NONE'
2025-01-27 18:54:56 MANAGEMENT: CMD 'bytecount 2'
2025-01-27 18:54:56 MANAGEMENT: CMD 'state on'
2025-01-27 18:54:58 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
2025-01-27 18:54:58 OpenSSL: error:0308010D:digital envelope routines::fetch failed:Algorithm AES-256-CBC:AES-192-CBC:AES-128-CBC cannot be found
2025-01-27 18:54:58 OpenSSL: error:0308010C:digital envelope routines::unsupported:Global default library context, Algorithm (AES-256-CBC:AES-192-CBC:AES-128-CBC : 0), Properties (<null>)
2025-01-27 18:54:58 The encryption method of your private keys/pkcs12 might be outdated and you probably need to enable the OpenSSL legacy provider to be able to use this profile.
2025-01-27 18:54:58 Cipher algorithm 'AES-256-CBC:AES-192-CBC:AES-128-CBC' not found
2025-01-27 18:54:58 MGMT: Got unrecognized command>FATAL:Cipher AES-256-CBC:AES-192-CBC:AES-128-CBC not supported
2025-01-27 18:54:58 MANAGEMENT: Client disconnected
2025-01-27 18:54:58 Cipher AES-256-CBC:AES-192-CBC:AES-128-CBC not supported
2025-01-27 18:54:58 Exiting due to fatal error
2025-01-27 18:54:58 Process exited with exit value 1
2025-01-27 18:54:58 Unscheduling VPN keep alive

Re: It is impossible to connect from Android. Cipher AES-256-CBC:AES-192-CBC:AES-128-CBC not supported

Posted: Mon Jan 27, 2025 10:37 pm
by solo

Re: It is impossible to connect from Android. Cipher AES-256-CBC:AES-192-CBC:AES-128-CBC not supported

Posted: Tue Jan 28, 2025 12:17 pm
by gfgdfgfdg
Thanks to your example I finally solved the bug locally. I added more data-ciphers than supported