Cannot get VPN to connect via Synology NAS

I have a https://www.synology.com/en-us/products/DS920+

I’ve followed the guide on windscribe’s website to setup the VPN for my NAS here:

https://windscribe.com/guides/synology

This was working for a while, but I have not been able to connect with this when I rechecked today. Not sure how long this has been the case.

I get the following error:

“Connection failed or certificate expired. Please use a valid certificate issued by the VPN server and try again.”

I’ve tried uploading the certificate provided from the windscribe website as well when setting up the VPN connection on the NAS (at the same time as uploading the config file) to no avail.

Any ideas what to try next?

Cheers

UPDATE:

So apparently there is a new firmware for the Synology NAS. DSM 7. I think this firmware update is very new, as I didn’t see this as an option when I had checked for updates very recently. Anyway, updating to this newer firmware version has resolved the issue. The VPN will now connect without issue.

Are you able to get a more verbose log? Are you sure you don’t have a hardcoded CA in the NAS, because if you do, that error makes sense. It should use the new CA from the OpenVPN config.

Did you update your openvpn configs recently?

Are you using a static IP?

On the morning of August 5 I noticed my static IP had disappeared. It reappeared a few hours later but it broke functionality on my Synology. I am able to connect fine with their public servers, but not really useful for what I want to use it for. Support even issued me another static IP to test, and I’m getting the same issue. Again, no problem using the public servers.

I made a post about it here. It’s not a solution, but it at least shows it’s not an isolated incident (someone else commented, too) and hopefully Windscribe will work on it. After a good couple days of support, I haven’t heard back from them in over a week now. Maybe that means they are working hard to fix it…? But it would be nice to at least have a courtesy email saying so.

I have the same issue. It started on Friday for me. Where can I find the detailed logs?
I get the same error I was getting when they phased out the compression but now I am using the new ovpn files and everything worked fine until Friday.

Same issue, Synology won’t connect to VPN.

Support working on this or do I need to send in another ticket to push them to fix it?

Solution for me was to remove all old ws vpn interface definitions. After this i could connect to the new one without issues.
Checking the filesystem before and after showed an old ca_******.crt file existed in the /usr/syno/etc/synovpnclient/openvpn folder and was removed by removing the old configs. This probably caused the issues.

EDIT: when adding a second ws site, the first one stops working… Second one still works, but it’s strange behaviour. Might have something to do with separate server site certs and the way openvpn caches ca certs or something…

I just want to add to this - I also reached out to support but have no intention as of now to upgrade to DSM 7.0 (Synology Photos needs too much work).

I received the following as of writing this:

Hi,

There are still some changes being made to OpenVPN connectivity on the back end. As of now, there are >still 6 days remaining.

Once the changes have been completed, you will be able to use DSM 6 on your NAS with the Windscribe >VPN. Until then, the options are to upgrade to DSM 7 or run Windscribe at the router level.

So, I will just be holding tight and hoping that in a week I’ll be able to connect again.

I am having the same issues and haven’t heard back from support in over a week. I PM’d support here on reddit as well with my support ticket number. It seems this is not an isolated incident.

EDIT: I actually sent a log of my Synology to support staff covering when the failed connections happened.

u/tyorll to get a log that actually covers this, first try to connect and get your error message. That way you know it’ll be one of the first logs in the log file. In your Synology UI click the start menu type thing at the top left, go to support center, support services, scroll down to log generation and make sure only system is checked. Generate the logs, and it will download a file called debug.dat. Extract that, then navigate to dsm/var/log. In that folder look for the file called “messages.” No extension. Open it with a text editor and save as .txt to send to Windscribe. You don’t need the other messages.xz files (as far as I know).

Yes I’ve downloaded new Configs on several occasions including today (after August 13) and tried all 3 of the multiple versions of OpenVPN settings that you can download. All attempts to connect have been unsuccessful.

So apparently there is a new firmware for the Synology NAS. DSM 7. I think this firmware update is very new, as I didn’t see this as an option when I had checked for updates very recently. Anyway, updating to this newer firmware version has resolved the issue. The VPN will now connect without issue.