No connection to OpenVPN: No such file or directory

shazam

We're starting to run OpenVPN on our server, but I'm running into an issue where I can't connect. Maybe I missed something, but I'm pretty sure I've done everything right. I put the *.ovpn file in the C:/ProgramFilesx86/OpenVPN/config/ folder, and all the appropriate user *.key and *.crt files are in the /OpenVPN Folder for logging in. Forgive me if this is a dumb question, I'm new to this :oops:

I'm running Windows 7 (64bit) and getting this error upon attempting to connect:

Wed Jun 06 09:45:48 2012 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct 1 2006
Wed Jun 06 09:45:48 2012 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Wed Jun 06 09:45:48 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Jun 06 09:45:48 2012 Cannot load certificate file client-username.crt: error:02001002:system library:fopen:No such file or directory: error:20074002:BIO routines:FILE_CTRL:system lib: error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib
Wed Jun 06 09:45:48 2012 Exiting

(*client-username.crt is labeled appropriately, just using this as an example)
Any help would be appreciated! Thanks

janjust

openvpn 2.0.9 does not work on windows vista/7; upgrade to 2.2.2 instead.

shazam

Thank you for the quick response. I upgraded to 2.2.2, and seem to encounter a similar message:

Wed Jun 06 10:27:27 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed Jun 06 10:27:27 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Jun 06 10:27:27 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jun 06 10:27:27 2012 Cannot load certificate file client-user.crt: error:02001002:system library:fopen:No such file or directory: error:20074002:BIO routines:FILE_CTRL:system lib: error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib
Wed Jun 06 10:27:27 2012 Exiting

janjust

openvpn cannot seem to load the file "client-user.crt" : is it present in the openvpn config directory (usually

 c:\program files\openvpn\config  # win32
 c:\program files (x86)\openvpn\config  # win64

) ?

shazam

The *client-user.crt* file was originally in C:/ProgramFilesx86/OpenVPN/

I dropped *client-user.crt* in the /config folder and here's that log:

Wed Jun 06 10:44:38 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed Jun 06 10:44:38 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Jun 06 10:44:38 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jun 06 10:44:38 2012 Cannot load private key file client-brent.key: error:02001002:system library:fopen:No such file or directory: error:20074002:BIO routines:FILE_CTRL:system lib: error:140B0002:SSL routines:SSL_CTX_use_PrivateKey_file:system lib
Wed Jun 06 10:44:38 2012 Error: private key password verification failed
Wed Jun 06 10:44:38 2012 Exiting

janjust

read the log file:

Cannot load private key file client-brent.key: error:02001002:system library:fopen:No such file or directory: error:20074002:BIO routines:FILE_CTRL:system lib: error:140B0002:SSL routines:SSL_CTX_use_PrivateKey_file:system lib
Wed Jun 06 10:44:38 2012 Error: private key password verification failed

the private key 'client-brent.key' is protected with a password which you need to supply.

shazam

Alright I see what I did wrong, I didn't put the *ca.crt* file in the /config directory.

Connection went through perfectly. Thank you so much janjust, your help is greatly appreciated!