TTOG OpenVPN config

Has anyone managed to successfully get the OpenVPN working on TTOG? I seem to be stuck at tls authentication step. Just can’t get it to work. Tried both, importing config file created by my OpenVPN server as well as manual config.
It would seem that the OpenVPN client on TTOG is an older version, which does not support tls-crypt. But I’ve had no luck changing my server over to using tls-auth either.
Would be great if someone who has it working, could chime in and point me in the right direction here.

I managed to get it working. For anyone else battling this in the future:

You will need to ssh into the TTOG, upgrade OpenSSL to version 1.0.2 (by building from source manually)
Then upgrade the OpenVPN installation to at least 2.4 (again, manually since there is no pre-compiled package available)

My cheat sheet below:

INSTALL OPENSSL 1.0.2

cd ~
wget https://www.openssl.org/source/openssl-1.0.2n.tar.gz
tar zxvf openssl-1.0.2n.tar.gz
cd openssl-1.0.2n
./config
make
make install

ln -sf /usr/local/ssl/bin/openssl `which openssl`

openssl version -v

INSTALL OPENVPN 2.4

apt-get install libssl-dev liblzo2-dev libpam0g-dev liblz4-1 init-system-helpers

cd ~
wget https://swupdate.openvpn.org/community/releases/openvpn-2.4.8.tar.gz
tar zxvf openvpn-2.4.8.tar.gz
cd openvpn-2.4.8
autoreconf -vi
./configure
make
make install

Change in /etc/init.d/openvpn DAEMON=/usr/local/sbin/openvpn

Now you can upload your *.ovpn config file via TTOG Web UI

3 Likes