I always use the git version to keep it updated ;) I got no fixed on these, still failed to connect. The iOS client seems more insane, so I test it on Android, when input the password, the client said: "gateway rejected the connection attempt.", debug log like: ocserv[22901]: [MYIP]:36190 accepted connection ocserv[22901]: [MYIP]:36190 client certificate verification succeeded ocserv[22901]: [MYIP]:36190 TLS handshake completed ocserv[22892]: [MYIP]:36190 auth init for user 'user' from '[MYIP]:36190' ocserv[22901]: [MYIP]:36190 sending auth request ocserv[22892]: [MYIP]:36190 auth req for user 'user' ocserv[22892]: [MYIP]:36190 accepting user 'user' ocserv[22892]: [MYIP]:36190 auth deinit for user 'user' ocserv[22892]: [MYIP]:36190 Selected IP: [10.10.11.192]:0 ocserv[22892]: [MYIP]:36190 assigning tun device vpns0 ocserv[22892]: [MYIP]:36190 user 'user' of group '[unknown]' authenticated ocserv[22901]: [MYIP]:36190 User 'user' logged in ocserv[22904]: [MYIP]:36191 accepted connection ocserv[22904]: [MYIP]:36191 error verifying client certificate: No certificate was found. ocserv[22904]: [MYIP]:36191 TLS handshake completed ocserv[22892]: [MYIP]:36191 command socket closed ocserv[22905]: [MYIP]:36192 accepted connection ocserv[22905]: [MYIP]:36192 error verifying client certificate: No certificate was found. ocserv[22905]: [MYIP]:36192 TLS handshake completed ocserv[22905]: [MYIP]:36192 sending cookie authentication request ocserv[22892]: [MYIP]:36192 failed authentication attempt for user 'user' ocserv[22905]: [MYIP]:36192 failed cookie authentication attempt ocserv[22892]: [MYIP]:36192 command socket closed ocserv[22892]: [MYIP]:36190 command socket closed On Mon, Dec 9, 2013 at 5:09 PM, Nikos Mavrogiannopoulos <nmav at gnutls.org> wrote: > On Sun, Dec 8, 2013 at 8:23 PM, Karl <weeker at outlook.com> wrote: >> Tried to check all the possibilities, with no luck. You mean capturing >> the traffic with wireshark on server side? Is there any simple >> instruction to do capture work? Thanks. > > Could you please elaborate on what you tried and what was the outcome? > How did you fix the untrusted certificate by the client? After that > was fixed, did you try with the ocserv version in git? Did that change > anything in the logs? > > regards, > Nikos
