Private key passphrase

rootking

Hi.
I have problem with private key passphrase, I changed private key passphrase in OpenVPN GUI and can't delete. On it not to fill connection without the password. I try to reinstall OpenVPN client, but password saved.

Sory for my English.

rootking

classic OpenVPN

rootking

No.
https://community.openvpn.net/openvpn/attachment/wiki/OpenVPN-GUI/connected_context.png
I changed password, and now can't remove only change.

JoshC

rootking wroteNo.
https://community.openvpn.net/openvpn/attachment/wiki/OpenVPN-GUI/connected_context.png
I changed password, and now can't remove only change.

The GUI has a built-in restriction requiring passwords to be 8 or more characters, which prevents you from setting an empty password using the GUI menu.

If you want to decrypt your private key, make sure you have openssl installed (you can select it during OpenVPN program installation as an option under Windows) and run:

openssl.exe rsa -in "C:\Path\to\your.key" -out "C:\Path\to\your.key"

Note that this will leave your private key unencrypted on-disk. Also note that you can encrypt keys from openssl at the command line by adding the -des3 option.

outInTheOpen

Thanks for your patience.
I did as you said. I recreated the client key without a password. I also executed the openssl command, just to be sure.
I recreated my client.conf file on the basis of the new keys etc.
But it still asks for a password.
I renamed my client.conf to something nonsense and it didn't ask for a passdw at bootup, but it failed to start ovpn.
It keeps asking me for my client Private Key Password.

outInTheOpen

clarification.
i created a client key using the command "build-key client" and no password was requested.
i created a 3des key too using "openssl rsa -in UserName.key -des3 -out UserName.3des.key"
and a password was requested in the process.
could this be the source of the issue?

outInTheOpen

0. I did the ./clean-all, build-ca and build-dh, just to be safe: started clean.

1. I recreated the client key without a password.

2. I adapted and applied the following commands:

"openssl rsa -in client.key -out client.key"
"openssl rsa -in client.3des.key -out client.3des.key"

3. I recreated client.conf.

Rebooted. Still asks for a Private Key Password of my client.

My reference: http://www.sans.org/reading-room/whitepapers/hsoffice/soho-remote-access-vpn-easy-pie-raspberry-pi-34427

I really don't know where to go from here. Am I the only one with this problem?