Can't get OpenVPN on Android to work

Same here

See here: https://forums.openvpn.net/viewtopic.php?f=36&t=21873#p62269

james yonan is the guy who started the openvpn project, so it's a pretty knowledgeable source...  his post includes a python script to check certs.

ah... so the XG firewall may be leaving out the seconds in the date of its cert...

Anyone from Sophos looked into this yet?

I checked our OVPN file with his script and everything checked out so I don't think that's what's happening, at least in our case:

[17:09:49] drewhammond:sophos-sslvpn-checker $ ./checkcert.py cert.ovpn
Certificate #1
151106023945Z : correct date length per RFC 5280
361231023945Z : correct date length per RFC 5280
Certificate #2

I checked our OVPN file with his script and everything checked out so I don't think that's what's happening, at least in our case:

[17:09:49] drewhammond:sophos-sslvpn-checker $ ./checkcert.py cert.ovpn
Certificate #1
151106023945Z : correct date length per RFC 5280
361231023945Z : correct date length per RFC 5280
Certificate #2

I think James at OpenVPN has identified the problem with the Sophos certificates: https://forums.openvpn.net/viewtopic.php?f=36&t=21873&p=62297#p62295

Hopefully we can get a hotfix ASAP

https://forums.openvpn.net/viewtopic.php?f=36&t=21873#p62295

Try again - you'll need to re-download the script.  Note how "Certificate #2" does not return any data... post above has more detail.

#########

Sorry Drew - you are aware, that other post is _you_.  Sophos won't let me delete this however... 

Hello Everyone,

no solution to this issue yet?

Regards,

Jose

None yet.  There have been many unfounded "try this" solutions however I don't think Sophos even tried them before recommending them.  OpenVPN seems to think that the root causes is a cert that XG Firewall uses, at least that's wht I gathered from a few links posted here.  Crazy to think that this isn't top priority considering we can't use open VPN from mobile devices for a few weeks now.