The current situation: I need to connect to an Astaro VPN box. Currently the only way to connect is using the Astaro Client for Windows. Normally any OpenVPN client (Viscosity, Tunnelblick, openvpn itself,...) can also be used to connect to an Astaro VPN box. Unfortunately this does not work on this special box. I get a message "VERIFY ERROR: could not extract CN from X509 subject string..." when connecting using a standard OpenVPN client.
A colleague tracked the problem down to the use of OpenSSL. The Astaro client uses an older OpenSSL library. He changed the OpenSSL lib of the OpenVPN client to the version used by the Astaro client and with this patch also the OpenVPN client could connect to the Astaro box.
I know that the maintainer of the Astaro box changed recently something on his box (updated to a new version and migrated all old accounts). Unfortunately he is not willingly to try to find the problem - all other users are using the Astaro client so from his view everything is ok.
My last idea is to find any way to install an older OpenVPN client that uses an older OpenSSL lib on my OSX machine. Is there any way to do this?
Short overview of my recent efforts:
- Talked with a collegue about the problem. Using brew it could be possible to activate old recipes and install old version of a given package. Didn't try this at the moment.
- Installed an old version of Ubuntu (8.04) inside a Virtualbox instance. Configured it to establish the vpn connection at startup and works as a router toward the secured network. Works fine and if there is no better solution I will stick with it.
- Could not get any support from the vendor of the VPN appliance. They claiming to have also OSX clients but the operator or the installation I have to connect to wasn't able to provide it.