michael.kondula
good morning,
i didn't know which topic is the best, because my question in more a support request, than a question 🙂
Normally i use IPSec VPN connection, but now we have to set up a open vpn connection with our router to a partner company.
What i got from our partner is a configfile, a ca-certificate with corresponding key and a second certificate with key for me.
I testet the connection on my windows 7 mashine and its works fine with that configuration:
client
dev tun0
proto udp
remote partnerhost 11194
resolv-retry infinite
nobind
persist-key
persist-tun
ca srl-test-ca.crt
cert partner.crt
key partner.key
ns-cert-type server
comp-lzo
verb 3
cipher AES-256-CBC
tls-auth srl-test.key 1
My problem is, the router of our solarpowerplant should connct via open vpn to that partner. So i imported the ca certificate (srl-test-ca.crt) and the key (srl-test.key).
now i tried to import our certificate (partner.crt). The webinterface of my router gives me 4 options to import certifactes
1) own certificates, that must be a pkcs12 file
2) CA certificates
3) partner certifcates
4) CRL (whatever that is)
I tried to import my certificate as partner certificate and everything was fine with that, but when i tried to configure the connection i couldn't choose the partner certificate, cuase it was not in the list. CRL and CA were no option so i tried to do this pkcs12 thing.
With a converter i produced a *pfx file, which i could import. Then i had the chance to selct the certificate in the list, but the connection produced errors, that there were some missing certificates.
Then i converted the files on my own with openssl and that command:
openssl pkcs12 -export -out server.p12 -inkey server.key -in server.crt -certfile CACert.crt
As server.key and server.crt i used my partner.crt and partner.key files as ca is used the only crt file left 🙂
Now i had a partner.p12 file, which i could import in my configuration, but still no connection...
The main problem is that i am not sure if i converted the files with the right procedure. Our partner says everyone gets the same files and if it works with the openVPN software it's obviously no problem with corrupted files or any problems with die VPN server on their side.
So i don't expect any more help from them. Is there a chance for me to find a solution without knowing how the producer implemented open vpn in the router ?
What should i do, or witch further information do i need to connect to that server ?
Please move the topic to the place it belongs to.
Greets Mike
