Can't get OpenVPN on Android to work

Same here

See here: https://forums.openvpn.net/viewtopic.php?f=36&t=21873#p62269

james yonan is the guy who started the openvpn project, so it's a pretty knowledgeable source...  his post includes a python script to check certs.

ah... so the XG firewall may be leaving out the seconds in the date of its cert...

Anyone from Sophos looked into this yet?

I checked our OVPN file with his script and everything checked out so I don't think that's what's happening, at least in our case:

[17:09:49] drewhammond:sophos-sslvpn-checker $ ./checkcert.py cert.ovpn
Certificate #1
151106023945Z : correct date length per RFC 5280
361231023945Z : correct date length per RFC 5280
Certificate #2

I think James at OpenVPN has identified the problem with the Sophos certificates: https://forums.openvpn.net/viewtopic.php?f=36&t=21873&p=62297#p62295

Hopefully we can get a hotfix ASAP

https://forums.openvpn.net/viewtopic.php?f=36&t=21873#p62295

Try again - you'll need to re-download the script.  Note how "Certificate #2" does not return any data... post above has more detail.

#########

Sorry Drew - you are aware, that other post is _you_.  Sophos won't let me delete this however... 

Hello Everyone,

no solution to this issue yet?

Regards,

Jose

Hello Everyone,

no solution to this issue yet?

Regards,

Jose

None yet.  There have been many unfounded "try this" solutions however I don't think Sophos even tried them before recommending them.  OpenVPN seems to think that the root causes is a cert that XG Firewall uses, at least that's wht I gathered from a few links posted here.  Crazy to think that this isn't top priority considering we can't use open VPN from mobile devices for a few weeks now.