Opened 12 months ago

Last modified 12 months ago

#68776 assigned defect

openvpn3 @3.8.3: Main thread exception: OpenSSL: error:1E08003C:DECODER routines::OSSL_DECODER lib

Reported by: zeddit (Dai Zhang) Owned by: i0ntempest
Priority: Normal Milestone:
Component: ports Version:
Keywords: Cc: neverpanic (Clemens Lang)
Port: openvpn3

Description (last modified by zeddit (Dai Zhang))

I am using openvpn3 client for a while to connect with my openvpn access server. After upgrading to 3.8.3 it tells me the error of Main thread exception: OpenSSL: error:1E08003C:DECODER routines::OSSL_DECODER lib after input a challenge response code of two factor authentication. which makes me could not connect to the server. I have changed the client to use a UI-based openvpn-connect, it could connect with the server, so the server side should have no problem.

I don't know if it is an error of openvpn3 client or it's a problem with the underlying openssl lib, on my mac, I have installed a version of 3.2.0 openssl3 with macports. I am not sure if there is a standalone version of openssl inside the openvpn3 client.

Change History (5)

comment:1 Changed 12 months ago by zeddit (Dai Zhang)

Description: modified (diff)

comment:2 Changed 12 months ago by ryandesign (Ryan Carsten Schmidt)

Owner: set to i0ntempest
Priority: HighNormal
Status: newassigned
Summary: openvpn3 3.8.3 throw 'Main thread exception: OpenSSL: error:1E08003C:DECODER routines::OSSL_DECODER lib'openvpn3 @3.8.3: Main thread exception: OpenSSL: error:1E08003C:DECODER routines::OSSL_DECODER lib

comment:3 Changed 12 months ago by ryandesign (Ryan Carsten Schmidt)

Cc: neverpanic added

Seems like the update to openssl3 @3.2.0 has caused problems for many ports.

comment:4 Changed 12 months ago by neverpanic (Clemens Lang)

Can you please provide:

  • your macOS or OS X version.
  • the full error message (there should be a file name and line number after this), or any other information that would help debug this. The OSSL_DECODER library has many places where it can throw an error, this alone isn't enough to debug this.
  • if possible, a copy of your OpenVPN server and client configuration (without the secrets of course), so I can replicate this.

comment:5 Changed 12 months ago by i0ntempest

New variant openssl1 added to link against the old openssl as a workaround. Alternatvely use mbedtls variant to use another crypto library.

Note: See TracTickets for help on using tickets.