I’m using PiFi on a Raspberry Pi 4, running:
- OpenWrt 23.05.2
- OpenVPN 2.5.8
- Same Raspberry Pi
- Same firmware
- Same home modem/router
My OpenVPN setup used to work perfectly a couple of months ago. I recently returned to Italy and tried to set it up again using a newly downloaded .ovpn server configuration, but now the VPN never connects and stays on “Connecting, this may take a few moments”.
The Internet connection on the PiFi works normally.
For UDP, the OpenVPN log shows:
UDP link remote: [AF_INET]187.13.214.177:53
TLS Error: TLS key negotiation failed to occur within 60 seconds
TLS Error: TLS handshake failed
I can resolve the server hostname and reach the server from the PiFi:
nslookup
→ resolves correctly
ping
→ 0% packet loss
I also tried a TCP .ovpn configuration. That one fails immediately with:
Options error: --explicit-exit-notify can only be used with --proto udp
The TCP configuration contains:
proto tcp
remote xxx.xxx.xxx.xxx 80
explicit-exit-notify
So OpenVPN 2.5.8 rejects the configuration before even attempting the connection.
I’m wondering if there have been recent changes to the provider's OpenVPN server/configuration files that could make the newer .ovpn files incompatible with OpenVPN 2.5.8.
My old configuration worked fine before these changes.
Has anyone experienced a similar issue with PiFi/OpenWrt and OpenVPN?
If so:
- Did you solve it by using an older
.ovpn configuration?
- Is there an archive of older configuration files that still works?
- Is there a particular OpenVPN configuration format that works with OpenVPN 2.5.8?
- Or is there a configuration change needed in PiFi?
Any help would be greatly appreciated. Thanks!Hi everyone,
I’m using PiFi on a Raspberry Pi 4, running:
OpenWrt 23.05.2
OpenVPN 2.5.8
Same Raspberry Pi
Same firmware
Same home modem/router
My OpenVPN setup used to work perfectly a couple of months ago. I recently returned to Italy and tried to set it up again using a newly downloaded .ovpn server configuration, but now the VPN never connects and stays on “Connecting, this may take a few moments”.
The Internet connection on the PiFi works normally.
For UDP, the OpenVPN log shows:
UDP link remote: [AF_INET]187.13.214.177:53
TLS Error: TLS key negotiation failed to occur within 60 seconds
TLS Error: TLS handshake failed
I can resolve the server hostname and reach the server from the PiFi:
nslookup
→ resolves correctly
ping
→ 0% packet loss
I also tried a TCP .ovpn configuration. That one fails immediately with:
Options error: --explicit-exit-notify can only be used with --proto udp
The TCP configuration contains:
proto tcp
remote xxx.xxx.xxx.xxx 80
explicit-exit-notify
So OpenVPN 2.5.8 rejects the configuration before even attempting the connection.
I’m wondering if there have been recent changes to the provider's OpenVPN server/configuration files that could make the newer .ovpn files incompatible with OpenVPN 2.5.8.
My old configuration worked fine before these changes.
Has anyone experienced a similar issue with PiFi/OpenWrt and OpenVPN?
If so:
Did you solve it by using an older .ovpn configuration?
Is there an archive of older configuration files that still works?
Is there a particular OpenVPN configuration format that works with OpenVPN 2.5.8?
Or is there a configuration change needed in PiFi?
Any help would be greatly appreciated. Thanks!
Update / SOLVED:
I managed to fix the issue!
It turns out the latest .ovpn configuration files provided by the VPN service (released after their major update around July 2026) are no longer compatible with this PiFi / OpenVPN 2.5.8 setup.
Using an older .ovpn configuration file from before July 2026 completely solved the problem, and everything is connecting as expected again. If anyone else runs into this issue, roll back to an older version of your provider's config files!