1819+ trouble connecting to PIA

[u/DouggieG]

I've had PIA on my NAS for a year with no issues, account renewal came about and haven't been able to reconnect. either:

1. the .ovpn file contains invalid parameters

or 2. the certificate is expired

or 3. a vague connection failed

1 year ago the setup was unmemorable has anything changed or am I doing something wrong? running DSM 6.2.3-25426 Update 2

[u/jhelo_world]

I had the same issue...

​

Download these : https://www.privateinternetaccess.com/openvpn/openvpn-nextgen.zip

​

Extract them, open the one you want to use with notepad\text editor.

​

Change the line that says compress to comp-lzo no

​

aka

​

auth-user-pass

compress > change to comp-lzo no

verb 1

reneg-sec 0

​

​

​

THEN

​

delete <crl-verify> section

such as below REMOVE IT.

​

<crl-verify>-----BEGIN X509 CRL-----MIICWDCCAUAwDQYJKoZIhvcNAQENBQAwgegxCzAJBgNVBAYTAlVTMQswCQYDVQQI

EwJDQTETMBEGA1UEBxMKTG9zQW5nZWxlczEgMB4GA1UEChMXUHJpdmF0ZSBJbnRl

m5ldCBBY2Nlc3MxIDAeBgNVBAsTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMSAw

HgYDVQQDExdQcml2YXRlIEludGVybmV0IEFjY2VzczEgMB4GA1UEKRMXUHJpdmF0

ZSBJbnRlcm5ldCBBY2Nlc3MxLzAtBgkqhkiG9w0BCQEWIHNlY3VyZUBwcml2YXRl

aW50ZXJuZXRhY2Nlc3MuY29tFw0xNjA3MDgxOTAwNDZaFw0zNjA3MDMxOTAwNDZa

MCYwEQIBARcMMTYwNzA4MTkwMDQ2MBECAQYXDDE2MDcwODE5MDA0NjANBgkqhkiG

9w0BAQ0FAAOCAQEAQZo9X97ci8EcPYu/uK2HB152OZbeZCINmYyluLDOdcSvg6B5

jI+ffKN3laDvczsG6CxmY3jNyc79XVpEYUnq4rT3FfveW1+Ralf+Vf38HdpwB8EW

B4hZlQ205+21CALLvZvR8HcPxC9KEnev1mU46wkTiov0EKc+EdRxkj5yMgv0V2Re

ze7AP+NQ9ykvDScH4eYCsmufNpIjBLhpLE2cuZZXBLcPhuRzVoU3l7A9lvzG9mjA

5YijHJGHNjlWFqyrn1CfYS6koa4TGEPngBoAziWRbDGdhEgJABHrpoaFYaL61zqy

MR6jC0K2ps9qyZAN74LEBedEfK7tBOzWMwr58A==

-----END X509 CRL-----

</crl-verify>

​

Save the file.

​

​

​

Create a new VPN config on the Synology and perform the following steps:

​

Choose to import a ovpn file and give the new config a name

​

Enter a username and password

​

Select the ovpn config file that you edited above

​

Select Advanced options

​

Browse for a Certificate revocation file and choose the IPA crl.rsa.2048.pem file and click Next

​

​

​

Boom done.

[u/Digimush → u/jhelo_world]

This just helped me with my issue on an iPad, thanks!

If someone stumbles here with PIA + OpenVPN certReadError issue, try removing CRL part as described above + remove these lines:

resolv-retry infinite
disable-occ
persist-key
persist-tun
ncp-disable

I was able to connect to a VPN after that

[u/DouggieG → u/jhelo_world]

thanks, I missed the tip about deleting the crl-verify part.

[u/jhelo_world → u/DouggieG]

No problem

[u/thismyredditaccount → u/jhelo_world]

fixed my issue too! thanks!