OpenVPN 2.5 not working with Viscosity

Got a problem with Viscosity or need help? Ask here!

Landy009

Posts: 1
Joined: Wed Dec 23, 2020 1:35 am

Post by Landy009 » Wed Dec 23, 2020 1:39 am
Hi team

I seem to have an issue with connecting to a pfsense 2.4.5 box. I believe its because it required OpenVPN 2.5 and the current version viscosity is running on is 2.4.9 See detailed log below. Is there a work around or new viscosity update expected?

2020-12-22 22:31:00: Viscosity Mac 1.9 (1556)
2020-12-22 22:31:00: Viscosity OpenVPN Engine Started
2020-12-22 22:31:00: Running on macOS 11.1.0
2020-12-22 22:31:00: ---------
2020-12-22 22:31:00: State changed to Connecting
2020-12-22 22:31:00: Checking reachability status of connection...
2020-12-22 22:31:00: Connection is reachable. Starting connection attempt.
2020-12-22 22:31:00: Options error: The command "data-ciphers" or one of its parameters is invalid for this version of OpenVPN (2.4.9). Please edit the connection, make sure the command is valid, and try again.
2020-12-22 22:31:00: Full command: data-ciphers AES-128-GCM:AES-256-GCM
2020-12-22 22:31:00: The OpenVPN subsystem could not be started.
2020-12-22 22:31:00: State changed to Disconnected (OpenVPN System Failure)

James

User avatar
Posts: 2313
Joined: Thu Sep 04, 2008 9:27 pm

Post by James » Wed Dec 23, 2020 3:51 am
Hi Landy009,

The "data-ciphers” command is an OpenVPN 2.5-only command. You can edit your connection in Viscosity and change it to “ncp-ciphers”, which is the equivalent OpenVPN 2.4 command.
https://www.sparklabs.com/support/kb/ar ... -commands/

If this if from a pfSense server the "data-ciphers-fallback” command may also be present. It can be replaced with the “cipher” command. I recommend also passing onto the administrator of your pfSense server that they should tick the "Legacy Client" option before exporting any configurations (which ensures that they are OpenVPN 2.4 compatible).

Cheers,
James
Web: https://www.sparklabs.com
Support: https://www.sparklabs.com/support
Twitter: https://twitter.com/sparklabs
2 posts Page 1 of 1