Openvpn transport error network eof error

Have been using OpenVPN on 3 different iOS devices for weeks without issues. Yesterday, all 3 encountered the same issue- my iPad and iPhone here on business travel in Australia, my wife’s iPhone back home in the US. Doesn’t matter if on cell data or wifi. Key problem seems to be a transport error per the log below. Client status toggles between «waiting for server» and «transport pause» before timing out. Had wife reboot our asus router but did not resolve. Grateful for any assistance.

2017-08-26 20:59:26 EVENT: RESOLVE
2017-08-26 20:59:26 Contacting 24.9.69.17:443 via TCP
2017-08-26 20:59:26 EVENT: WAIT
2017-08-26 20:59:26 SetTunnelSocket returned 1
2017-08-26 20:59:27 Connecting to [xxxx.asuscomm.com]:443 (24.9.69.17) via TCPv4
2017-08-26 20:59:27 TCP recv EOF
2017-08-26 20:59:27 Transport Error: Transport error on ‘xxxx.asuscomm.com: NETWORK_EOF_ERROR
2017-08-26 20:59:27 EVENT: TRANSPORT_ERROR Transport error on ‘xxxx.asuscomm.com: NETWORK_EOF_ERROR [ERR]
2017-08-26 20:59:27 Client terminated, restarting in 5000 ms…
2017-08-26 20:59:27 NET Internet:ReachableViaWiFi/-R t——
2017-08-26 20:59:30 RECONNECT TEST: Internet:ReachableViaWiFi/-R t——
2017-08-26 20:59:30 Client terminated, reconnecting in 1…
2017-08-26 20:59:31 EVENT: RECONNECTING
2017-08-26 20:59:31 EVENT: RESOLVE
2017-08-26 20:59:31 Contacting 24.9.69.17:443 via TCP
2017-08-26 20:59:31 EVENT: WAIT
2017-08-26 20:59:31 SetTunnelSocket returned 1
2017-08-26 20:59:31 Connecting to [xxxx.asuscomm.com]:443 (24.9.69.17) via TCPv4
2017-08-26 20:59:32 TCP recv EOF
2017-08-26 20:59:32 Transport Error: Transport error on ‘xxxx.asuscomm.com: NETWORK_EOF_ERROR
2017-08-26 20:59:32 EVENT: TRANSPORT_ERROR Transport error on ‘xxxx.asuscomm.com: NETWORK_EOF_ERROR [ERR]
2017-08-26 20:59:32 Client terminated, restarting in 5000 ms…
2017-08-26 20:59:35 RECONNECT TEST: Internet:ReachableViaWiFi/-R t——
2017-08-26 20:59:35 Client terminated, reconnecting in 1…
2017-08-26 20:59:36 EVENT: RECONNECTING
2017-08-26 20:59:36 EVENT: RESOLVE
2017-08-26 20:59:36 Contacting 24.9.69.17:443 via TCP
2017-08-26 20:59:36 EVENT: WAIT
2017-08-26 20:59:36 SetTunnelSocket returned 1
2017-08-26 20:59:36 Connecting to [xxxx.asuscomm.com]:443 (24.9.69.17) via TCPv4
2017-08-26 20:59:36 TCP recv EOF
2017-08-26 20:59:36 Transport Error: Transport error on ‘xxxx.asuscomm.com: NETWORK_EOF_ERROR
2017-08-26 20:59:36 EVENT: TRANSPORT_ERROR Transport error on ‘xxxx.asuscomm.com: NETWORK_EOF_ERROR [ERR]
2017-08-26 20:59:36 Client terminated, restarting in 5000 ms…
2017-08-26 20:59:39 RECONNECT TEST: Internet:ReachableViaWiFi/-R t——
2017-08-26 20:59:39 Client terminated, reconnecting in 1…
2017-08-26 20:59:40 EVENT: RECONNECTING
2017-08-26 20:59:40 EVENT: RESOLVE
2017-08-26 20:59:40 Contacting 24.9.69.17:443 via TCP
2017-08-26 20:59:40 EVENT: WAIT
2017-08-26 20:59:40 SetTunnelSocket returned 1
2017-08-26 20:59:40 Connecting to [xxxx.asuscomm.com]:443 (24.9.69.17) via TCPv4
2017-08-26 20:59:41 TCP recv EOF
2017-08-26 20:59:41 Transport Error: Transport error on ‘xxxx.asuscomm.com: NETWORK_EOF_ERROR
2017-08-26 20:59:41 EVENT: TRANSPORT_ERROR Transport error on ‘xxxx.asuscomm.com: NETWORK_EOF_ERROR [ERR]
2017-08-26 20:59:41 Client terminated, restarting in 5000 ms…
2017-08-26 20:59:41 EVENT: DISCONNECTED
2017-08-26 20:59:41 Raw stats on disconnect:
BYTES_OUT : 64
PACKETS_OUT : 4
NETWORK_EOF_ERROR : 4
TRANSPORT_ERROR : 4
N_RECONNECT : 3
2017-08-26 20:59:41 Performance stats on disconnect:
CPU usage (microseconds): 21531
Network bytes per CPU second: 2972
Tunnel bytes per CPU second: 0

Sure, two follow-up questions:
1) I assume you are referring to the log on my router, in which case I will need to check when I return home as I am currently remote
2) Any suggestion as to what I am looking for or what the issue is? Or, just generic guidance to check the log?

Thanks

Доброго времени суток!

Есть такой момент, на CentOS8 установлены OpenVPN+easy-rsa, отконфигурировал центральный свитч на проброс порта с внешнего адреса на сервер. В целом соединения стартуют без проблем, но толи в меру своей криворукости, толи еще по каким причинам, когда идет одно соединение, все идет без проблем, стоит подключиться кому-то еще, соединения начинают рвать друг друга. Читал маны не смог понять в чем может быть прикол, т.к. в целом по конфигу вроде все верно. хоть и более чем уверен, что напартачил в них.

Если для всех клиентов используется один и тот же клиентский ключ/сертификат, то это нормальное поведение OpenVPN сервера. Чтобы позволить нескольким клиентам использовать один ключ/сертификат, надо в конфиг сервера добавить строку duplicate-cn.
Но это не сильно хорошо для контроля и безопасности, поэтому лучше каждому клиенту выдать свой сертификат.

10 февр. 2023, в 01:33

1500 руб./за проект

10 февр. 2023, в 00:54

2000 руб./в час

10 февр. 2023, в 00:15

1000 руб./в час

OpenVPN Not connecting in Orbi system

Hi, i have a brandnew ORBI RBK23 system (1 router, 2 satellites), router connected to cable modem. The ORBI router as replacement for a Nighthawk R7000, on which a VPN service worked flawlessly. Connection with Samsung Android smart phone as well as iPad without problems, but Windows Notebook problems with certificates.

But not on the new ORBI: nothing at all works as far as VPN is concerned.

I did all the settings as prescribed, downloaded the right client .ovpn file, but to no avail.

Any suggestions?

HELP PLEASE!

(Firmware: v2.2.1.210; service type TUN mode: TCP; service type TAP mode: UDP; clients access VPN: all internet sites as well as home network)

Re: OpenVPN Not connecting in Orbi system

FOUND IT! Thanks to you. I changed the settings of TUN back to UDP and now it is working all right! I forgot that I initially tested it over the home network and as you said, that does not work (but it did on my previous router, so that caused my confusion). When I set the wifi on my iPad to my smart phone 4G hotspot, it works fine now!!

The only thing that is still bothering me is the lg in the windows client (notebook with windows 10). Connection is achieved all right, but in the log I see this:

Tue Nov 20 10:03:33 2018 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Nov 20 10:03:44 2018 WARNING: this configuration may cache passwords in memory — use the auth-nocache option to prevent this

Should I start a new topic on this, or may I ask your opinion about this too? (I tried to understand what is explained in the provided openvpn.net link, but can’t get a grip on the contents; seems that I have to do a lot of programming, which seems very difficult).

But anyhow, by this conversation with you, my problems with the connection, anyway on my iPad as well as my android smart phone, are completely solved! Thank you very much!

Re: OpenVPN Not connecting in Orbi system

I have VPN working well on iPhone and iPad. 

— What happens when it does not work for you?

— Do you see any event in Logs when VPN is tried? This can show if the VPN connection request arrives to Orbi. 

— Is DDNS configured correctly and working? Do you get the correct status when clicking “Status” in the DDNS tab?

— Please note that you can’t try VPN connection while connected to your own wifi or another network using the same IP range as your own LAN. 

My Setup | Internet Fiber ONT 250↓/250↑ | ISP Telenor | Wifi Router Orbi RBR850 + RBS850 + 2x RBS750 + 3xRBS350, Wired/Wireless BH / Orbi RBR50 + 6x RBS50 + RBS40V + RBS50Y, Wired/Wireless BH | Switches NG GS208 | Time Zone CET (Sweden)

Re: OpenVPN Not connecting in Orbi system

Thanks for responding!

what happens is that i get time outs. In the log files i see each time the same error: «TCP rcv EOF» followed by «TRANSPORT_ERROR Transport error on ‘(my name).mynetgear.com: NETWORK_EOF_ERROR [ERR]»

in the DDNS, with clicking on «show status» i get the message, after a few seconde of waiting, that an update was performed a few days ago (correct, that was when i tried to setup my VPN first time) on (my name).mynetgear.com.

does this give you any clues?

Re: OpenVPN Not connecting in Orbi system

Before starting “deeper” troubleshooting, can you please first untick “Enable VPN Service” option under VPN and click Apply, then tick it again and click Apply. Anything changes?

My Setup | Internet Fiber ONT 250↓/250↑ | ISP Telenor | Wifi Router Orbi RBR850 + RBS850 + 2x RBS750 + 3xRBS350, Wired/Wireless BH / Orbi RBR50 + 6x RBS50 + RBS40V + RBS50Y, Wired/Wireless BH | Switches NG GS208 | Time Zone CET (Sweden)

Re: OpenVPN Not connecting in Orbi system

Did what you suggested, nothing changed, i keep the logged error (EOF error).

Also rebooted several times, but again, same problem.

Should i perform a total reset and renew installation? (Don’t like the idea, but on the other hand, it can be done if you think that’s wise).

Or should i delete my mynetgear address and start from scratch there, with a new address on mynetgear.com?

Re: OpenVPN Not connecting in Orbi system

— You mentioned that your TUN Mode is set to TCP. Any reason for that? The default (which I have working) is UDP.

My Setup | Internet Fiber ONT 250↓/250↑ | ISP Telenor | Wifi Router Orbi RBR850 + RBS850 + 2x RBS750 + 3xRBS350, Wired/Wireless BH / Orbi RBR50 + 6x RBS50 + RBS40V + RBS50Y, Wired/Wireless BH | Switches NG GS208 | Time Zone CET (Sweden)

Re: OpenVPN Not connecting in Orbi system

Did that after the initial udp option did not work (same problem), and on the former router Nighthawk R7000, this was the working setting…

Re: OpenVPN Not connecting in Orbi system

FOUND IT! Thanks to you. I changed the settings of TUN back to UDP and now it is working all right! I forgot that I initially tested it over the home network and as you said, that does not work (but it did on my previous router, so that caused my confusion). When I set the wifi on my iPad to my smart phone 4G hotspot, it works fine now!!

The only thing that is still bothering me is the lg in the windows client (notebook with windows 10). Connection is achieved all right, but in the log I see this:

Tue Nov 20 10:03:33 2018 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Nov 20 10:03:44 2018 WARNING: this configuration may cache passwords in memory — use the auth-nocache option to prevent this

Should I start a new topic on this, or may I ask your opinion about this too? (I tried to understand what is explained in the provided openvpn.net link, but can’t get a grip on the contents; seems that I have to do a lot of programming, which seems very difficult).

But anyhow, by this conversation with you, my problems with the connection, anyway on my iPad as well as my android smart phone, are completely solved! Thank you very much!

Re: OpenVPN Not connecting in Orbi system

Glad that this helped. Good luck

My Setup | Internet Fiber ONT 250↓/250↑ | ISP Telenor | Wifi Router Orbi RBR850 + RBS850 + 2x RBS750 + 3xRBS350, Wired/Wireless BH / Orbi RBR50 + 6x RBS50 + RBS40V + RBS50Y, Wired/Wireless BH | Switches NG GS208 | Time Zone CET (Sweden)

Re: OpenVPN Not connecting in Orbi system

and to be complete for all readers of this topic, about the added questions concerning the log file of the windows client connection:

the line about the warning of certificates vanishes if one adds the line «remote-cert-tls server» to the .OVPN config file

the second warning, about the passwords cache, is of no real siginificance and can be ignored.

again many thanks to ekhalil!

Re: OpenVPN Not connecting in Orbi system

I’m having the same issue…I cant seem to connect to my VPN on windows 10.  I am able to connect to it no problem on my iphone and ipad.  But on windows 10, I’m getting this in the log file:

Enter Management Password:
Tue Nov 20 14:47:48 2018 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Nov 20 14:48:53 2018 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Nov 20 14:49:58 2018 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Nov 20 14:51:05 2018 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Nov 20 14:52:11 2018 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.

Any help would be appreciated.  Thanks in advance

_______________________________________________________________________________________________________________

UPDATE:  I was trying to connect while on my home network (not sure if that matters).  I tried while on my iphone hotspot and his is what i get:

Enter Management Password:
Tue Nov 20 15:02:04 2018 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Nov 20 15:02:06 2018 TAP-Windows adapter ‘NETGEAR-VPN’ not found

Re: OpenVPN Not connecting in Orbi system

Ok, UPDATE #2:  After researching the last log file entry, I renamed the TAP Windows Adapter to «NETGEAR-VPN».  Now I’m getting:

Enter Management Password:
Tue Nov 20 15:12:08 2018 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Nov 20 15:12:08 2018 Could not determine IPv4/IPv6 protocol
Tue Nov 20 15:12:13 2018 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.

I just cant win!!  I already researched that as well and cant seem to find info on it.  Now any help would be appreciated.  Sorry, and thanks in advance

Re: OpenVPN Not connecting in Orbi system

Well, since I got it running, you should be able to run it too, especially with your equipment!

I suppose you have the newest ORBI firmware, and you have a valid mynetgear.com account. And you downloaded the right files (those for Windows) from the router.

In VPN settings, leave the TUN service mode and TAP service mode as it is (so leave TUN to UPD and do not change it, like I tried to no avail, to TCP)

You already renamed the TAP adapter to NETGEAR-VPN, that is necessary too.

Did you also add the line «remote-cert-tls server» to your client.ovpn file? Because when you did, the warning about the certificates should not appear. Are you sure that the (in this way edited) client.ovpn is in the C:program filesopenvpnconfig subdirectory?

And indeed, it matters that you test your VPN from a different network than your ORBI network.

Please check the above issues and let us know if this helps?

Re: OpenVPN Not connecting in Orbi system

Thanks for the fast reply…

• Yes the router and satellites are on the current firmwares
• Yes my mynetgear account is valid
• Yes I downloaded the correct config files for windows
• Both TUN and TAP are default and havnet been changed
• Yes I renamed the adapter to NETGEAR-VPN as you stated
• No, I did not add that line to my config file.  Is that simply added that to the send line?  My config file is 1 line long…very long and nothing else.  Do I add it with quotes or without?

Here is my current config file:

Only 1 line

client
dev tap
proto udp
dev-node NETGEAR-VPN
remote (removed for privacy) 12974
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
cipher AES-128-CBC
comp-lzo
verb 0
sndbuf 393216
rcvbuf 393216

Not sure why it pasted as being multiple lines, that’s why i included the image.

• Lastly, yes, the config file is in the correct directory

I actually gave up until i saw your reply.  I will keep at it, but its very frustrating and shouldn’t be this hard.

Re: OpenVPN Not connecting in Orbi system

Also, opening the config file in notepad:

I added remote-cert-tls server without the quotes at the very end and when i go to save it, it says i dont have permission and need to seek file owner or administrator.  I am the administrator on the machine, only 1 user.

Re: OpenVPN Not connecting in Orbi system

Yes, that is what i saw too. So what i did was editing the ovpn file in the download directory and then copied the new / edited file to the config subdir. Here too the system complained about my rights, but there was the option to continue as administrator. And that worked.

The line is indeed to be placed at the end of the file, i put it right at the end, two spaces after the last character.

And indeed without he quotation marks!

Please inform about the result!

Re: OpenVPN Not connecting in Orbi system

Thanks again for your help…i really appreciate it.

New Errors — New Logs…so maybe a step in the right direction.  BUT, you’re right, i’m not geting the «certificate» warning anymore

Re: OpenVPN Not connecting in Orbi system

I am very sorry your problem still exists…

Btw, your client.ovpn contains exactly the same lines as mine, only mine is one long line without hard returns (in notepad), and no spaces between the lines as compared to yours (where there are hard returns). I wonder why you apparently downloaded another format…

What exactly are the «new ERRORs» you write about in your last post?

Re: OpenVPN Not connecting in Orbi system

Ah, now i can see the errors, but i do not understand them…

You have the exact lines in your (as compared to my) client.ovpn, and i also tried what would happen if i make it a file with neat 18 lines (the 18th being the added line remote-cert-tls server). No difference, works equal flawlessly.

The  only possible difference (but i do not know its significance) is that you keep also a client file in the C:users(user)openvpnconfig? Because i have not (the only place is the C:program filesopenvpnconfig, along with the 3 other files of course (ca.crt, client.crt and client.key).

If the problem still exists, you might try the good old reboot of your system and / or try the whole operation without the protection of firewalls etc.

I am afraid i can’t be of further assistance (being kind of a novice myself!)

Good luck, and please post again if you have (hopefully good) news flashes!

Good afternoon. At me the following problem — openvpn does not work on devices with operating system IOS. In doing so, everything works on other operating systems including (MacOS). In this case, this situation is observed only if the certificates were generated in Mikrotik. If you import keys created into linux into it, everything works fine. First he gave such a mistake.

2017-06-25 01:43:04 EVENT: CORE_ERROR PolarSSL: error parsing config private key : PKCS5 — Requested encryption or digest alg not available [ERR]

How I figured this out was because the microphone encrypts the private key with a format that does not support iOS.

[root@ip-172-31-14-92 centos]# openssl asn1parse -in 1_cert_export_test-client-ovpn-12.key
0:d=0 hl=4 l=1311 cons: SEQUENCE
4:d=1 hl=2 l= 73 cons: SEQUENCE
6:d=2 hl=2 l= 9 prim: OBJECT BES2
17:d=2 hl=2 l= 60 cons: SEQUENCE
19:d=3 hl=2 l= 27 cons: SEQUENCE
21:d=4 hl=2 l= 9 prim: OBJECT BKDF2
32:d=4 hl=2 l= 14 cons: SEQUENCE
34:d=5 hl=2 l= 8 prim: OCTET STRING [HEX DUMP]:249CA7FCEC409541
44:d=5 hl=2 l= 2 prim: INTEGER :0800
48:d=3 hl=2 l= 29 cons: SEQUENCE
50:d=4 hl=2 l= 9 prim: OBJECT :aes-256-cbc
61:d=4 hl=2 l= 16 prim: OCTET STRING [HEX DUMP]:0A3C812B3F915210ADB830EC58C43845

On Linux such a conclusion.

[root@ip-172-31-14-92 centos]# openssl asn1parse -in client_07.key
0:d=0 hl=4 l=1294 cons: SEQUENCE
4:d=1 hl=2 l= 64 cons: SEQUENCE
6:d=2 hl=2 l= 9 prim: OBJECT BES2
17:d=2 hl=2 l= 51 cons: SEQUENCE
19:d=3 hl=2 l= 27 cons: SEQUENCE
21:d=4 hl=2 l= 9 prim: OBJECT BKDF2
32:d=4 hl=2 l= 14 cons: SEQUENCE
34:d=5 hl=2 l= 8 prim: OCTET STRING [HEX DUMP]:12700371E88C41C2
44:d=5 hl=2 l= 2 prim: INTEGER :0800
48:d=3 hl=2 l= 20 cons: SEQUENCE
50:d=4 hl=2 l= 8 prim: OBJECT :des-ede3-cbc

After my manipulations, the algorithms coincided. But there was another mistake.
2017-06-25 23:01:56 Client exception in transport_recv_excode: PolarSSL: SSL read error : SSL — Processing of the Certificate handshake message failed

I ask to help with the decision of the given problem.

Hi,

I tried to find solution for the same problem Mikrotik OpenVPN with iPhone.

I can’t find out how to fix problem — PKCS5 — Requested encryption or digest alg not available [ERR]

I found only one post on MikroTik forum.
I’m trying to connect to the vpn from my iPhone, but I still can’t get working solution for this.
Same time I’m using same OpenVpn from my MacOS without any problems.

From OpenVpn iPhone app I’m getting following messages :

2018-04-04 22:04:33 ----- OpenVPN Start -----
OpenVPN core 3.2 ios arm64 64-bit built on Feb 22 2018 12:39:28
2018-04-04 22:04:33 Frame=512/2048/512 mssfix-ctrl=1250
2018-04-04 22:04:33 EVENT: CORE_ERROR mbed TLS: error parsing config private key : PKCS5 - Requested encryption or digest alg not available [ERR]
2018-04-04 22:04:33 Raw stats on disconnect:
2018-04-04 22:04:33 Performance stats on disconnect:
 CPU usage (microseconds): 24407
 Network bytes per CPU second: 0
 Tunnel bytes per CPU second: 0

Maybe somebody is using Mikrotik OpenVpn with iPhone sucessfully or can help me to find solution ?

Openvpn on ios can work too. But only with the certificates that were generated using the utility easyrsa. Staff means mikrotik do not get it. But if you import third-party certificates then certificate revocation does not work. Can anyone tell me with which keys to generate a certificate on the router that it would be compatible with the IPhone.

Hi,
I’m raising @Alexandr1047 post to @MikroTik_Team.
I hope that somebody from @MikroTik_Team is also using iPhone and can explain or fix that for us

Thanks in advance !

hi all
same problem
have anyone solved?

thanks
f

I see the same on my Android device.
Connecting to my Mikrotik hAP ac2 does not work any more (firmware 6.43.2) from my Samsung Galaxy S6 phone (Android 7.0, using the official ‘OpenVPN Connect — Fast & Safe SSL VPN Client’ from the Google Store). Connecting from a Windows10 computer works fine.

No error messages, just a lot of ‘TCP connection established’ messages in the Mikrotik logfile.
It did work in the past (about a month ago, so before the update to 6.43.x)

Modification 2018-10-22:

I found another Android OpenVPN app, which gave me much more, and much more detailed, errorlogging («OpenVPN Client Free»). Using this app I could pinpoint a certificate error. Now I can connect using both Windows 10 and Android 7.0.

So looking back it was not a MikroTik software problem, although the absence of detailed error logging on the MikroTik hAP ac2 made solving this problem rather complex.

Been trying to get this working most of the afternoon, have made some progress but getting a different error.

How I made progress:

Export the client certificate from the Mikrotik as a PKCS12 cert instead of PEM. In your .ovpn file, instead of the

cert cert_export_client1.crt
key cert_export_client1.key

directives, you replace them with:

pkcs12 cert_export_client1.p12

I have left the <ca> block in my ovpn with the cert in there.

The problem I’m having now is I have a connection on the Mikrotik from the iOS device, but in the OVPN client on the phone it states

TCP recv EOF
Transport Error: Transport error on ‘[my host]’ NETWORK_EOF_ERROR

If a fresh pair of eyes can help here it’d be great.

And after a whole afternoon of battling it would appear that I accidentally disabled the secret on the Mikrotik which was the cause of my connection resets.

OpenVPN now working. Steps taken:

1. Export client certificate as PKCS on Mikrotik, CA certificate as PEM.
2. Create .ovpn file with CA cert embedded inline — example of mine below

dev tun
proto tcp-client
remote my.domain.com
port 1194
nobind
persist-key
persist-tun
tls-client
remote-cert-tls server

verb 4
mute 10
cipher AES-256-CBC
auth SHA1

ping 15
ping-restart 45
ping-timer-rem

auth-user-pass auth.cfg
auth-nocache

<ca>
-----BEGIN CERTIFICATE-----
[your CA cert here]
-----END CERTIFICATE-----
</ca>
pkcs12 cert_export_client1.ovpn12

3. Import .p12 certificate via Mail app into iPhone Keychain (as per iOS article posted above — though I don’t feel this is necessary as even without this step the VPN works)
4. Copy the .p12 to a .ovpn12 file as per the article again.
5. Import certs (.ovpn12), auth.cfg and ovpn file in iTunes for OpenVPN
6. Import certificate in OpenVPN app
7. Import profile in OpenVPN app and assign certificate (ovpn12)
8. Connect