@JW0914 thank you for your reply, changing cipher from aes-cbc-256 to aes-cbc-128 solved the problem, thanks for sharing your ideas! 
@stumper to be honest, I don't understand your question. I have simply installed a VPN official client and used certificates to connect