Verified diagnostic signature
VERIFY ERROR
OpenVPN reported an authentication, transport or TLS control-channel failure. Read the first causal line; AUTH_FAILED and inactivity are not proof that a certificate is invalid. Match this output from openvpn, then continue with sourced, read-only checks.
- Confidence
- high
- Platforms
- linux · macos · windows
- Verified
- 2026-09-09
Recognized output
Signature matched locally
VERIFY ERROROneLiners matches this pattern in your browser. Your pasted output is not stored or indexed.
Likely causes
What usually produces this signal
- Expired, not-yet-valid, revoked, or incorrectly issued peer certificate
- Wrong CA, certificate purpose, expected identity, or system clock
- Mismatched tls-crypt or tls-auth material
- Blocked transport, wrong endpoint, or incompatible TLS policy
Safe next checks
Collect evidence before changing the system
Show recent OpenVPN service logs
journalctl -u openvpn --since <since> --no-pagerThe output matches the expected target and exits without an error.
Resolve a hostname to its IP address
dig +short <domain>The output matches the expected target and exits without an error.
Check whether a TCP port accepts connections
nc -vz <host> <port>The output matches the expected target and exits without an error.
Inspect a remote TLS certificate
openssl s_client -connect <host>:<port> -servername <host> </dev/null 2>/dev/null | openssl x509 -noout -subject -issuer -datesThe output matches the expected target and exits without an error.
Related signals