Latest iOS OpenVPN update breaks SSL VPN

Question

Hi, 
 after updating to the latest OpenVPN app (v3.4.0) on iOS/iPadOS, you are unable to establish an SSL VPN connection to Sophos XG. An error is shown about an unsupported option in the config file. Our vendor found out that removing the 'route-delay' option from the OpenVPN config file solves the issue. 
 Question remains why Sophos is using a deprecated option in the config file which now causes errors in the connection. You can also question why OpenVPN not just ignores an unsupported option instead of throwing an error which causes the connection to be refused.

FrankWest · Accepted Answer

This works, quoted from the other thread. 
 Quick and dirty fix: 
 
 SSH login to Sophos XG 
 open an advanced shell (5 -> 3) 
 vi /content/sslvpn/client-config-template.ovpn 
 scroll down to "route-delay 4" 
 press i for insert mode 
 add ";" in front 
 ESC -> :wq 
 
 After the change, you can finally download working .ovpn-configuration files for OpenVPN 3.4 in the XG user portal again.

Giridhar Katti · Answer

Hi All, 
 There's a workaround mentioned in the community page to get over this issue. We are planning to work on fixing this in the upcoming 19.5MR4 and v20.0MR1.

Vishal_R · Answer

Hi Allan Hamner Yes for UTM similar workaround is there. The path is different - For UTM the path is /var/confd/res/openvpn/client.ovpn-default

Vivek Jagad · Answer

Hey Allan Hamner , Enter the following line: vi /var/confd/res/openvpn/client.ovpn-default 
 The above command will open the file called client.ovpn-default in the vi editor 
 Press the Down Arrow in your keyboard until you see and the pointer is at "route-delay 4", 
 
 Press the letter "i" on your keyboard to enter INSERT mode in vi, and press the semicolon symbol (;) on your keyboard 
 
 Press the key ESC on your keyboard followed by :x or :wq (you should see the :X on the left bottom corner of your screen

Vishal_R · Answer

Hi FrankWest Thank you for reaching out to the Sophos community team.

Please review the Product team comment/information given in the below thread to get more information on the raised question:

OpenVPN SSL VPN Configuration gives error: Unsported Options "route delay 4"

emmosophos · Answer

Hello Frank, 
 The answer mentioned by Vishal is marked as a "Suggested" answer, which is correct since he is providing a suggestion to your question. As you can see you were able to resolve your question after following Vishal Suggestion to the link he provided. Your last answer is a "Verified" answer because it solves your question. 
 Regards,

Latest iOS OpenVPN update breaks SSL VPN

Top Replies