http://www.thelinuxwiki.com/index.php?action=history&feed=atom&title=openvpn_TSL_unsupported_protocol 2026-04-29T00:46:58Z Revision history for this page on the wiki MediaWiki 1.21.5 http://www.thelinuxwiki.com/index.php?title=openvpn_TSL_unsupported_protocol&diff=1585&oldid=prev 2026-01-05T20:08:28Z

<p>Created page with &quot; == environment == OpenWrt 24.10.4 == errors == Mon Jan 5 13:44:54 2026 daemon.notice openvpn(junkervpn)[17226]: TLS: Initial packet from [AF_INET]10.0.0.117:11194, sid=...&quot;</p> <p><b>New page</b></p><div><br /> == environment ==<br /> OpenWrt 24.10.4 <br /> <br /> <br /> == errors ==<br /> <br /> Mon Jan 5 13:44:54 2026 daemon.notice openvpn(junkervpn)[17226]: TLS: Initial packet from [AF_INET]10.0.0.117:11194, sid=a48ff4a0 b182fbd1<br /> Mon Jan 5 13:44:54 2026 daemon.err openvpn(junkervpn)[17226]: TLS error: Unsupported protocol. This typically indicates that client and server have no common TLS version enabled. This can be caused by mismatched tls-version-min and tls-version-max options on client and server. If your OpenVPN client is between v2.3.6 and v2.3.2 try adding tls-version-min 1.0 to the client configuration to use TLS 1.0+ instead of TLS 1.0 only<br /> Mon Jan 5 13:44:54 2026 daemon.err openvpn(junkervpn)[17226]: OpenSSL: error:0A000102:SSL routines::unsupported protocol:<br /> Mon Jan 5 13:44:54 2026 daemon.err openvpn(junkervpn)[17226]: TLS_ERROR: BIO read tls_read_plaintext error<br /> Mon Jan 5 13:44:54 2026 daemon.err openvpn(junkervpn)[17226]: TLS Error: TLS object -&gt; incoming plaintext read error<br /> Mon Jan 5 13:44:54 2026 daemon.err openvpn(junkervpn)[17226]: TLS Error: TLS handshake failed<br /> <br /> <br /> == root cause ==<br /> tls version mismatch. need to enable 1.0 on the connecting client device.<br /> <br /> == solution ==<br /> <br /> add the following line to the appropriate conf file in /etc/openvpn/ directory<br /> tls-version-min 1.0 <br /> <br /> [[category:openvpn]]</div>

Nighthawk