Cannot load private key file error:0B080074

sidhis

A second pair of eye on this :geek: would be greatly appreciated:

I'm just trying to get OpenVPN to simply start on an asus rt-n16 router running DD-WRT v24-sp2 (06/07/14) kingkong - build 22000M. I was able to get OpenVPN to work properly on Asus' firmware (RT-N16_3.0.0.4_374_5517-g302e4dc.trx), and even connect to it with a Windows client. The problem there was that the key files filled up the nvram of the router, causing it to lose all its configuration if it lost power or rebooted - thus I moved on to dd-wrt where you can enable a jffs partition, where I put the key files (and I don't lose everything on reboot anymore).

I'm getting the following error in the logs when OpenVPN tries to start up:

Jan 1 00:00:09 DD-WRT daemon.notice openvpn[873]: Diffie-Hellman initialized with 1024 bit key
Jan 1 00:00:09 DD-WRT daemon.warn openvpn[873]: Cannot load private key file /jffs/openvpn/key.pem: error:0B080074:lib(11):func(128):reason(116)
Jan 1 00:00:09 DD-WRT daemon.err openvpn[873]: Error: private key password verification failed
Jan 1 00:00:09 DD-WRT daemon.notice openvpn[873]: Exiting due to fatal error

Here's what I've tried after reading other threads:

Is my private key file key.pem protected by a password?
-No, all the server private keys file starts with -----BEGIN PRIVATE KEY-----, and I am not prompted for a password when I run: openssl rya -text -noout -in ./keys/asusrtn16.key from the Windows 7 box running easy-rsa, and I do not add a password when running the build-key-server.bat command.

Have I recreated the keys?
-Yes, three times now. I even uninstalled and reinstalled the OpenVPN client on the Windows 7 machine.

Have you tried just loading the keys from /tmp/openvpn - the default?
-Yes, I receive the same error.

Have you changed the permissions on key.pem
-Yes, still receive the same error.

Why are you not suspecting your keys or certificates?
-They worked fine on the Asus firmware, so I'm pretty sure this error is about something else.

My unanswered questions:

Any other ideas concerning why OpenVPN cannot load this file running on dd-wrt?

Should I post this in the dd-wrt forum?

Thanks!

Here's the openvpn.conf file that dd-wrt generates (it added my custom file paths at the end):

keepalive 10 120
verb 3
mute 3
syslog
writepid /var/run/openvpnd.pid
management 127.0.0.1 14
management-log-cache 100
topology subnet
script-security 2
port 1194
proto tcp-server
cipher aes-128-cbc
auth sha1
client-config-dir /jffs/etc/openvpn/ccd
comp-lzo yes
tls-server
client-to-client
push "redirect-gateway def1"
tcp-nodelay
tun-mtu 1400
mtu-disc yes
server 10.8.0.0 255.255.255.0
dev tun2
tun-ipv6
dh /jffs/openvpn/dh.pem
ca /jffs/openvpn/ca.crt
cert /jffs/openvpn/cert.pem
key /jffs/openvpn/key.pem

maikcat

Is my private key file key.pem protected by a password?
-No, all the server private keys file starts with -----BEGIN PRIVATE KEY-----, and I am not prompted for a password when I run: openssl rya -text -noout -in ./keys/asusrtn16.key from the Windows 7 box running easy-rsa, and I do not add a password when running the build-key-server.bat command.

just to verify...

your key is key.pem , where key.pem = asusrtn16.key ?

also openssl syntax is openssl rsa not rya (just verify..)

also i stumbled on this...

http://svn.dd-wrt.com/ticket/2411

Michael.