26May
I tried to use Tryhackme on Kali Linux and got an error
I downloaded the “.ovpn” file from the tryhackme site, ran “openvpn hoochoo224.ovp” and got an error, so I read the error and added “--data-ciphers-fallback BF-CBC” to the “.ovpn” file. Then I got a second error, please tell me how to fix it
first error:
2024-05-26 00:29:01 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-05-26 00:29:01 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2024-05-26 00:29:01 OpenVPN 2.6.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-05-26 00:29:01 library versions: OpenSSL 3.2.2-dev , LZO 2.10
2024-05-26 00:29:01 DCO version: N/A
2024-05-26 00:29:01 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.168.160:1194
2024-05-26 00:29:01 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-05-26 00:29:01 UDPv4 link local: (not bound)
2024-05-26 00:29:01 UDPv4 link remote: [AF_INET]18.202.168.160:1194
2024-05-26 00:29:02 TLS: Initial packet from [AF_INET]18.202.168.160:1194, sid=fb5cf184 2abc08dd
2024-05-26 00:29:02 VERIFY ERROR: depth=1, error=self-signed certificate in certificate chain: CN=ChangeMe, serial=425397202556807641543660048237946304772097879576
2024-05-26 00:29:02 Sent fatal SSL alert: unknown CA
2024-05-26 00:29:02 OpenSSL: error:0A000086:SSL routines::certificate verify failed:
2024-05-26 00:29:02 TLS_ERROR: BIO read tls_read_plaintext error
2024-05-26 00:29:02 TLS Error: TLS object -> incoming plaintext read error
2024-05-26 00:29:02 TLS Error: TLS handshake failed
2024-05-26 00:29:02 SIGUSR1[soft,tls-error] received, process restarting
2024-05-26 00:29:02 Restart pause, 1 second(s)
second error:
2024-05-26 00:31:17 Note: --data-cipher-fallback with cipher 'BF-CBC' disables data channel offload.
2024-05-26 00:31:17 OpenVPN 2.6.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-05-26 00:31:17 library versions: OpenSSL 3.2.2-dev , LZO 2.10
2024-05-26 00:31:17 DCO version: N/A
2024-05-26 00:31:17 WARNING: INSECURE cipher (BF-CBC) with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC). Support for these insecure ciphers will be removed in OpenVPN 2.7.
2024-05-26 00:31:17 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.168.160:1194
2024-05-26 00:31:17 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-05-26 00:31:17 UDPv4 link local: (not bound)
2024-05-26 00:31:17 UDPv4 link remote: [AF_INET]18.202.168.160:1194
2024-05-26 00:31:17 TLS: Initial packet from [AF_INET]18.202.168.160:1194, sid=089e2b28 38265ba5
2024-05-26 00:31:17 VERIFY ERROR: depth=1, error=self-signed certificate in certificate chain: CN=ChangeMe, serial=425397202556807641543660048237946304772097879576
2024-05-26 00:31:17 Sent fatal SSL alert: unknown CA
2024-05-26 00:31:17 OpenSSL: error:0A000086:SSL routines::certificate verify failed:
2024-05-26 00:31:17 TLS_ERROR: BIO read tls_read_plaintext error
2024-05-26 00:31:17 TLS Error: TLS object -> incoming plaintext read error
2024-05-26 00:31:17 TLS Error: TLS handshake failed
2024-05-26 00:31:17 SIGUSR1[soft,tls-error] received, process restarting
2024-05-26 00:31:17 Restart pause, 1 second(s)
2024-05-26 00:31:18 TCP/UDP: Preserving recently used remote address: [AF_INET]18.202.168.160:1194
2024-05-26 00:31:18 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-05-26 00:31:18 UDPv4 link local: (not bound)
2024-05-26 00:31:18 UDPv4 link remote: [AF_INET]18.202.168.160:1194
2024-05-26 00:31:19 TLS: Initial packet from [AF_INET]18.202.168.160:1194, sid=af8e490e 011dbd50
2024-05-26 00:31:19 VERIFY ERROR: depth=1, error=self-signed certificate in certificate chain: CN=ChangeMe, serial=425397202556807641543660048237946304772097879576
2024-05-26 00:31:19 Sent fatal SSL alert: unknown CA
2024-05-26 00:31:19 OpenSSL: error:0A000086:SSL routines::certificate verify failed:
2024-05-26 00:31:19 TLS_ERROR: BIO read tls_read_plaintext error
2024-05-26 00:31:19 TLS Error: TLS object -> incoming plaintext read error
2024-05-26 00:31:19 TLS Error: TLS handshake failed
2024-05-26 00:31:19 SIGUSR1[soft,tls-error] received, process restarting
2024-05-26 00:31:19 Restart pause, 1 second(s)
^C2024-05-26 00:31:20 SIGINT[hard,init_instance] received, process exiting
