OpenVPN Config Problem (PIA)

    The OpenVPN config PIA distributes implements a Certificate Revocation List (CRL) check for security reasons, but the CRL data they embed in the config contains invalid dates and this causes connection failures with OpenSSL 3.3.0 or newer. Our master branch (LE13) bumped to 3.3.0 in April 2024 and is currently on 3.5.0, while the LE12 branch is currently on 3.2.4 - so I would assume you have moved from LE12 to LE13 and this introduced the issue.

    See https://github.com/openssl/openssl/discussions/24301 - according to posts/reddit threads linked from that discussion thread the workaround is removing the <crl-verify> section from the PIA config.

    Quote from Reddirt

    So if I understand this issue correctly would a clean install of LE13 with OpenSSL 3.5.0 solve this?

    If the problem starts with OpenSSL 3.3.0 "and newer" and LE13 is running OpenSSL 3.5.0 .. then no.

    Just edit the config and remove the offending <crl-verify> section.

    Meantime I decided to have a go at the edit option. This can be done using ssh only? I was looking for way to edit the config file on a pc but can't find the file anywhere on the micro sdcard. Probably a dumb question but I'm in the dark here.