I have now modified the .ovpn thusly:
.
#tls-auth ta.key
.
#auth-token-user USER
#auth-token TOTP
.
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
<censored>
-----END OpenVPN Static key V1-----
</tls-auth>
key-direction bidirectional
Moved the .ovpn and .p12 to the phone.
Added the .pk12
Added the .ovpn
Attempt to connect and the log IPFire>OpenVPN reports:
08:29:13 openvpnserver[30093]: 166.182.249.12:20990 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
08:29:13 openvpnserver[30093]: 166.182.249.12:20990 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
08:29:13 openvpnserver[30093]: 166.182.249.12:20990 TLS: Initial packet from [AF_INET]166.182.249.12:20990, sid=61fa6c00 9dcc2477
08:29:14 openvpnserver[30093]: 166.182.249.12:20990 CRL: loaded 1 CRLs from file /var/ipfire/ovpn/crls/cacrl.pem
08:29:15 openvpnserver[30093]: 166.182.249.12:20990 VERIFY ERROR: depth=0, error=certificate revoked: C=US, O=parkerhome, CN=Mac, serial=2
08:29:15 openvpnserver[30093]: 166.182.249.12:20990 OpenSSL: error:0A000086:SSL routines::certificate verify failed
08:29:15 openvpnserver[30093]: 166.182.249.12:20990 TLS_ERROR: BIO read tls_read_plaintext error
08:29:15 openvpnserver[30093]: 166.182.249.12:20990 TLS Error: TLS object -> incoming plaintext read error
08:29:15 openvpnserver[30093]: 166.182.249.12:20990 TLS Error: TLS handshake failed
08:29:15 openvpnserver[30093]: 166.182.249.12:20990 SIGUSR1[soft,tls-error] received, client-instance restarting
08:29:56 openvpnserver[30093]: 166.182.249.12:14386 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
08:29:56 openvpnserver[30093]: 166.182.249.12:14386 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
08:29:56 openvpnserver[30093]: 166.182.249.12:14386 TLS: Initial packet from [AF_INET]166.182.249.12:14386, sid=91d6190a 544b39e3
08:29:56 openvpnserver[30093]: 166.182.249.12:14386 CRL: loaded 1 CRLs from file /var/ipfire/ovpn/crls/cacrl.pem
08:29:58 openvpnserver[30093]: 166.182.249.12:14386 VERIFY ERROR: depth=0, error=certificate revoked: C=US, O=parkerhome, CN=Mac, serial=2
08:29:58 openvpnserver[30093]: 166.182.249.12:14386 OpenSSL: error:0A000086:SSL routines::certificate verify failed
08:29:58 openvpnserver[30093]: 166.182.249.12:14386 TLS_ERROR: BIO read tls_read_plaintext error
08:29:58 openvpnserver[30093]: 166.182.249.12:14386 TLS Error: TLS object -> incoming plaintext read error
08:29:58 openvpnserver[30093]: 166.182.249.12:14386 TLS Error: TLS handshake failed
08:29:58 openvpnserver[30093]: 166.182.249.12:14386 SIGUSR1[soft,tls-error] received, client-instance restarting