Extra OpenVPN configuration field issue with DH param

Got a problem with Viscosity or need help? Ask here!

moleculezz

Posts: 1
Joined: Thu Jul 13, 2017 12:24 am

Post by moleculezz » Thu Jul 13, 2017 12:33 am
Hello,

When importing .ovpn file it messes up the DH PARAMETERS tag.
The file contains the following:
Code: Select all
<dh>
-----BEGIN DH PARAMETERS-----
MIGHAoGBAK5byDF+gr005lkCxxxxxxxxuU7QF0HA3mIQIREY+Ikd6AqiE4bAUiPUtI
6MRJs8KZc3D3biSZVZvDfNT8SYxxxxxxxxSvb6h47RPKSUFwHs/K8HboMdtwk1omSV
9AWTHJY2fLrCwjQ9/A6Bed5YsyxxxxxxxxnhD0GcFGWatuzqqr/PrAgEC
-----END DH PARAMETERS-----
</dh>
But when I view it in Viscosity Preferences -> Advanced. It's like this:
Code: Select all
-----BEGIN DH PARAMETERS-----
<dh>
MIGHAoGBAK5byDF+gr005lkCxxxxxxxxuU7QF0HA3mIQIREY+Ikd6AqiE4bAUiPUtI
</dh>
6MRJs8KZc3D3biSZVZvDfNT8SYxxxxxxxxSvb6h47RPKSUFwHs/K8HboMdtwk1omSV
-----END DH PARAMETERS-----
9AWTHJY2fLrCwjQ9/A6Bed5YsyxxxxxxxxnhD0GcFGWatuzqqr/PrAgEC
The log displays the following error:
Code: Select all
2017-07-12 10:18:49: Viscosity Mac 1.7.3 (1412)
2017-07-12 10:18:49: Viscosity OpenVPN Engine Started
2017-07-12 10:18:49: Running on macOS 10.11.6
2017-07-12 10:18:49: ---------
2017-07-12 10:18:49: State changed to Connecting
2017-07-12 10:18:49: Checking reachability status of connection...
2017-07-12 10:18:49: Connection is reachable. Starting connection attempt.
2017-07-12 10:18:49: ERROR: Endtag <//dh> missing
2017-07-12 10:18:49: Wed Jul 12 10:18:49 2017 Exiting due to fatal error
2017-07-12 10:18:49: The OpenVPN subsystem could not be started.
2017-07-12 10:18:49: State changed to Disconnected

James

User avatar
Posts: 2313
Joined: Thu Sep 04, 2008 9:27 pm

Post by James » Fri Jul 14, 2017 12:42 pm
Hi moleculezz,

DH files are for the server-side only. They should not be used or included client-side.

However Viscosity should be removing it on import, rather than ignoring it (and hence creating a mess in the Adv commands area). Thanks for the report - we'll make sure an embedded DH file gets properly stripped in the next update.

Cheers,
James
Web: https://www.sparklabs.com
Support: https://www.sparklabs.com/support
Twitter: https://twitter.com/sparklabs
2 posts Page 1 of 1