Openvpn not working in Windows

bukaka19

Hello All.

I have been using my asus rt-ac68u router's built in openvpn server for a few months now and it has been awesome to connect to my home network using my android devices. However I finally was able to purchase a laptop and now I am trying to setup openvpn client on it. I have had no success. I imported the config.ovpn file into the correct config folder. However when I open the GUI and try to connect I run in to an error directly after inputting my username and password. The error is "Cannot load inline certificate file:error:0906D06C:PEM routines:PEM_read_bio:no start line:error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib"
I searched for answers but I came up short of what could be the issue. I have tried on two different versions of windows on different computers and both yielded the same error message.

Here is an link adress to an image of my server config page.
https://drive.google.com/file/d/0B7usQ9S1tT-seG0wTTFIbkVfekk/view?usp=sharing

My config.ovpn file as automatically exported from the server is as follows:

client
dev tun
proto udp
remote homecrib.asuscomm.com 1194
float
comp-lzo adaptive
keepalive 15 60
auth-user-pass
ns-cert-type server
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<cert>
paste client certificate data here
</cert>
<key>
paste client key data here
</key>
resolv-retry infinite
nobind

Any and all help is greatly appreciated

Thanks
Chris

maikcat

which version of openvpn are you using?

can you post your complete logs?

cert & key sections do have BEGIN,END line?

Michael.

Traffic

bukaka19 wroteThe error is "Cannot load inline certificate file:error:0906D06C:PEM ....."

bukaka19 wrote<cert>
paste client certificate data here
</cert>

If your post is accurate then you have not "paste client certificate data here"

bukaka19

Hello thanks for the quick replies. I am using version 2.3.6-1601-x86_64 on the client/windows side. Im using whatever comes stock on asus router rt-ac68u for server side.

Complete log is:

Fri Jan 23 08:35:02 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec 1 2014
Fri Jan 23 08:35:02 2015 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Enter Management Password:
Fri Jan 23 08:35:19 2015 Cannot load inline certificate file: error:0906D06C:PEM routines:PEM_read_bio:no start line: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib
Fri Jan 23 08:35:19 2015 Exiting due to fatal error

I am not sure of client cert or key do i have to fill this in manually? When i go into the setting of the vpn on server i can see 4 sections of keys/certs :
Certificate Authority
Server Certificate
Server Key
Diffie Hellman Parameters

Am i supposed to copy those keys to where it says "paste client certificate data here" or "paste client key data here"

Sorry again im new at this.

Traffic

bukaka19 wroteAm i supposed to copy those keys to where it says "paste client certificate data here" or "paste client key data here"

If the router does not have some option to export a client config file with inline certs and keys then .. Yes .. you will have to copy and paste them yourself.

The router may have facilities to generate ca/cert/key and dh .. if it does use that.
If not you may have to use Easy-RSA ...

bukaka19

OK I ended up deleting this line from the config file "client.opvn":

</ca>
<cert>
paste client certificate data here
</cert>
<key>
paste client key data here
</key>
resolv-retry infinite
nobind

I was able to connect finally. However I still dont have access to my home network. I see the ethernet adapter ip adress it gave me 10.0.0.8 . here is the log from openvpn:

Wed Jan 28 17:14:45 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec 1 2014
Wed Jan 28 17:14:45 2015 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Enter Management Password:
Wed Jan 28 17:14:55 2015 UDPv4 link local (bound): [undef]
Wed Jan 28 17:14:55 2015 UDPv4 link remote: [AF_INET]174.44.172.46:1194
Wed Jan 28 17:14:55 2015 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Jan 28 17:14:56 2015 [RT-AC68U] Peer Connection Initiated with [AF_INET]174.44.172.46:1194
Wed Jan 28 17:14:58 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Jan 28 17:14:58 2015 open_tun, tt->ipv6=0
Wed Jan 28 17:14:58 2015 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{D31BE7A8-7083-4175-B909-FA9B12C7E1F1}.tap
Wed Jan 28 17:14:58 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.10/255.255.255.252 on interface {D31BE7A8-7083-4175-B909-FA9B12C7E1F1} [DHCP-serv: 10.8.0.9, lease-time: 31536000]
Wed Jan 28 17:14:58 2015 Successful ARP Flush on interface [23] {D31BE7A8-7083-4175-B909-FA9B12C7E1F1}
Wed Jan 28 17:15:03 2015 Initialization Sequence Completed

Any ideas what i should do next?

maikcat

its crucial to post complete client/server logs.

Michael.

bukaka19

Ok so my ultimate goal is to be able to use openvpn on my asus rt-ac68u to be able to connect to home network and browse the internet as well as watch tv on my optimum app remotely on both windows and android clients. So if i follow these instructions on here exactly (http://www.smallnetbuilder.com/other...n-asus-routers) I can easily connect my android to the router and access internet, my shared servers and home network. It allows me to connect to home router using 192.168.1.1 and also allows me to run the optimum app and makes it think im on my home network, perfect. However this does not allow my windows 8.1 laptop to do the same. If i use the same config file for windows it allows me to connect to home network but does not allow me to have any internet access. If i change the interface to a TAP based tunnel it allows my laptop to connect to everything; internet, home network, optimum app (which thinks im home when im not) and easy pings the router. However android does not support TAP based tunnel so this setup will not work for me either. Is there any settings i can change when in TUN mode to allow my PC to have access to the internet as well as home network?