Thank you, it's okay now. It's possible that the certificate I generated earlier didn't match the domain name. iOS authentication may be stricter than Mac, which may have caused the failure on iOS.

Reply: [ What platform are you testing on? ] iOS

" Are you by chance playing audio in your PacketTunnelApp? Did you mean to do this and is this being done from a 3rd party framework? " this is the hold iOS system log, i think this log is not my app or PacketTunnelApp's log. "Process PacketTunnelApp [361] killed by jetsam reason per-process-limit " And what is this log mean ? what is ' jetsam reason per-process-limit` , is there any official description about this ?

I finally get a device this problem show, and the device log: status changed to disconnected, last stop reason Plugin failed

But our VPN APP is base on openVPN3, ' connecting or authenticating with your remote server' and set route all do after startTunnelWithOptions called And I had checked the server side logs, there is not any log when VPN process pause on the entrance of startTunnelWithOptions function. Could you tell me, what the program do between NEPacketTunnelProvider init and startTunnelWithOptions