[b]I posted in the wrong forum! please some admin could move it? sorry, i used the "new post" button while reading a similar question :oops: [/b] Hi all! I'm trying to use openvpn 2.3.2 (in opensuse 13.1 via [k]networkmanager) to connect to the vpn of my workplace. The configuration file that they provide is pasted below (I edited out the server name and the comments), it looks all right. [code] pkcs12 lorenzo_2015.p12 ca CNRS-all.crt client dev tun proto udp remote XXX.YYY.jussieu.fr 1194 resolv-retry infinite nobind persist-key persist-tun ns-cert-type server tls-remote XXX.YYY.jussieu.fr comp-lzo verb 3 [/code] The CA cert is just the cat of the certs from [url]https://igc.services.cnrs.fr/search_CA_certificate/?CA=CNRS2-Standard&lang=fr&body=view_ca.html[/url] and a couple more (that I think are no more necessary as they expired years ago), there is no problem with them. The client certificate is provided by the same authority [url]https://igc.services.cnrs.fr/usercert/?CA=CNRS2-Standard&lang=fr[/url]. They are only delivered to people working in French research. When the certificate was delivered to me, I imported it directly in firefox (it was the only possible way) the export it from there in p12 format (Firefox -> preferences -> advanced -> certificates -> View certificates -> Your certificate -> select the good line -> Backup... -> I choose a password and save it as /full/path/to/lorenzo_20015.p12). I can use the certificate directly in Firefox to connect to the webmail and the intranet. I import the config file in knetworkmanager, put the password where I should. However when I try to connect it fails silently. In /var/log/NetworkManager there is: [code] 2014-01-04T23:37:54.041203+01:00 paulaxps NetworkManager[626]: Starting VPN service 'openvpn'... 2014-01-04T23:37:54.043378+01:00 paulaxps NetworkManager[626]: VPN service 'openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 4852 2014-01-04T23:37:54.051267+01:00 paulaxps NetworkManager[626]: VPN service 'openvpn' appeared; activating connections 2014-01-04T23:37:54.071930+01:00 paulaxps NetworkManager[626]: VPN plugin state changed: starting (3) 2014-01-04T23:37:54.074517+01:00 paulaxps NetworkManager[626]: VPN connection 'IMPMC' (Connect) reply received. 2014-01-04T23:37:54.076808+01:00 paulaxps nm-openvpn[4854]: OpenVPN 2.3.2 x86_64-suse-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built on May 31 2013 2014-01-04T23:37:54.077131+01:00 paulaxps nm-openvpn[4854]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. 2014-01-04T23:37:54.077314+01:00 paulaxps nm-openvpn[4854]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2014-01-04T23:37:54.077464+01:00 paulaxps nm-openvpn[4854]: Cannot load certificate file /full/path/to/lorenzo_2015.p12: error:0906D06C:PEM routines:PEM_read_bio:no start line: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib 2014-01-04T23:37:54.077641+01:00 paulaxps nm-openvpn[4854]: Exiting due to fatal error 2014-01-04T23:37:54.077853+01:00 paulaxps NetworkManager[626]: VPN plugin failed: 1 2014-01-04T23:37:54.078233+01:00 paulaxps NetworkManager[626]: VPN plugin state changed: stopped (6) 2014-01-04T23:37:54.078497+01:00 paulaxps NetworkManager[626]: VPN plugin state change reason: 0 2014-01-04T23:37:54.078736+01:00 paulaxps NetworkManager[626]: Policy set 'freebox_LEP' (wlan0) as default for IPv4 routing and DNS. 2014-01-04T23:37:54.079045+01:00 paulaxps NetworkManager[626]: error disconnecting VPN: Could not process the request because no VPN connection was active. 2014-01-04T23:37:59.790849+01:00 paulaxps NetworkManager[626]: VPN service 'openvpn' disappeared [/code] I have triple-checked that all the files are there and the permissions are good, that the password is right etc. I have imported the p12 file in google-chrome then re-exported it in another file with another, no success. Anybody can provide any hint on what could be going wrong?

OpenVPN cannot read user certificate

paulatz

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

maikcat

can you try to remove the password from the key and try again?

also try to use absolute path names in your config.

please post the permissions used for your keys.

Michael

paulatz

can you try to remove the password from the key and try again?

No, I had tried this already, but neither Firefox nor Chrome would let me export a key without password. Can you recommend some tool to do it?

also try to use absolute path names in your config.

After importing the configuration I did set them absolute in the networkmanager interface; furthermore the log message shows the absolute path. Anyway, I'll try this again tonight. just to be sure

please post the permissions used for your keys.

-rw-r--r-- 1 paulatto users 4.9K Nov 18 13:51 /full/path/to/lorenzo_2015.p12