Hi guys

I've just installed OpenVPN-2.6.0-I003-amd64.msi on Microsoft Windows 11 (build 
22621.1105).

The contents of a sample config file from my commercial VPN vendor/provider are 
as follows:

client
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
verb 3
remote-cert-tls server
ping 10
ping-restart 60
sndbuf 524288
rcvbuf 524288
cipher AES-256-CBC
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA
proto tcp4
pull-filter ignore "route-ipv6"
pull-filter ignore "ifconfig-ipv6"
auth-user-pass password.txt
auth-nocache
ca ca.crt
service xyzopenvpn
block-outside-dns
remote 11.22.33.44 443

My computer was able to connect to the VPN vendor's server. According to the 
connection log, the data channel offload (ovpn-dco) was opened.

However, I was unable to surf the internet. The error "Server Not Found" 
appeared in my Firefox browser.

What I did next was to add the following line to the config file:

--data-ciphers-fallback AES-256-CBC

The contents of the config file have changed as follows:

client
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
verb 3
remote-cert-tls server
ping 10
ping-restart 60
sndbuf 524288
rcvbuf 524288
cipher AES-256-CBC
--data-ciphers-fallback AES-256-CBC
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA
proto tcp4
pull-filter ignore "route-ipv6"
pull-filter ignore "ifconfig-ipv6"
auth-user-pass password.txt
auth-nocache
ca ca.crt
service xyzopenvpn
block-outside-dns
remote 11.22.33.44 443

My computer is able to connect to the VPN provider's server. This time, 
however, ovpn-dco is disabled according to the first line in my connection log:

Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, 
disabling data channel offload.

With ovpn-dco disabled, I can surf the internet and browse websites without 
issues.

It appears that the kernel of Microsoft Windows 11 rejects and prevents 
ovpn-dco from working.

What do you guys think?

Best regards.

Stella


_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to