<HTML><BODY>Hello.<br>I have just build openvpn with openvpn-build with these versions:<br>OPENSSL_VERSION="${OPENSSL_VERSION:-1.0.2k}"<br>PKCS11_HELPER_VERSION="${PKCS11_HELPER_VERSION:-1.11}"<br>LZO_VERSION="${LZO_VERSION:-2.10}"<br>TAP_WINDOWS_VERSION="${TAP_WINDOWS_VERSION:-9.21.2}"<br>OPENVPN_VERSION="${OPENVPN_VERSION:-2.4.1}"<br>OPENVPN_GUI_VERSION="${OPENVPN_GUI_VERSION:-11}"<br><br>Compilation success, no problem. <br>i modified openssl.cnf to include engine gost.<br>openssl_conf = openssl_def <br>[ openssl_def ] <br>engines = engine_section<br>[ engine_section ]<br>gost = gost_section<br>[gost_section]<br>default_algorithms=ALL<br>engine_id=gost <br><br>openssl ciphers | tr ":" "\n" | grep GOST<br>GOST2001-GOST89-GOST89<br>GOST94-GOST89-GOST89<br><br>openssl list-message-digest-algorithms | grep gost<br>gost-mac<br>md_gost94<br>gost-mac<br>md_gost94<br><br>openssl shows me GOST.<br><br>------<br>gost-server.ovpn<br>-----<br>dev tap<br>engine gost<br>auth gost-mac<br>cipher gost89<br>tls-cipher GOST2001-GOST89-GOST89<br>#comp-lzo yes<br>ca ca.crt<br>cert server.crt<br>key server.key<br>dh dhparam.pem<br>server 10.0.0.0 255.255.255.0<br>keepalive 10 120<br>proto tcp<br>socket-flags TCP_NODELAY<br>persist-key<br>persist-tun<br><br>openvpn gost-server.ovpn says me<br>-- Initializing OpenSSL support for engine 'gost'<br>-- Deprecated TLS cipher name 'GOST2001-GOST89-GOST89', please use IANA name 'TLS_GOSTR341001_WITH_28147_CNT_IMIT'<br>-- OpenSSL: error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match<br>-- Failed to set restricted TLS cipher list: GOST2001-GOST89-GOST89<br>-- Exiting due to fatal error<br><br>Please help with this problem<br></BODY></HTML>