Official HTC images are known to have a strange routing problem causing traffic not to flow through the tunnel (See also Issue 18 in the bug tracker.)

Older official SONY images from Xperia Arc S and Xperia Ray have been reported to be missing the VPNService completely from the image. (See also Issue 29 in the bug tracker.)

On custom build images the tun module might be missing or the rights of /dev/tun might be wrong. Some CM9 images need the Fix ownership option under Device specific hacks enabled.

Most importantly: If your device has a broken Android image, report it to your vendor. The more people who report an issue to the vendor, the more likely they are to fix it.

" (Indicator: "https://") "q

Starting with OpenSSL version 1.1, OpenSSL rejects weak signatures in certificates like MD5.

MD5 signatures are completely insecure and should not be used anymore. MD5 collisions can be created in few hours at a minimal cost.. You should update the VPN certificates as soon as possible.

Unfortunately, older easy-rsa distributions included the config option default_md md5. If you are using an old easy-rsa version, update to the latest version) or change md5 to sha256 and regenerate your certificates.

If you really want to use old and broken certificates use the custom configuration option tls-cipher DEFAULT:@SECLEVEL=0 under advanced configuration or as additional line in your imported configuration

" (Indicator: "https://")