I'm using OpenVPN with self-signed cert on PC. Now i try to import it to my iphone 5s (9.2) and ipad (9.2) through itunes. It's OK but when i try to connect VPN, I get this error: 2016-01-20 16:00:02 ----- OpenVPN Start ----- OpenVPN core 3.0 ios arm64 64-bit [b]2016-01-20 16:00:02 EVENT: CORE_ERROR PolarSSL: error parsing ca certificate : PK - The pubkey tag or value is invalid (only RSA and EC are supported) [ERR][/b] 2016-01-20 16:00:02 Raw stats on disconnect: 2016-01-20 16:00:02 Performance stats on disconnect: CPU usage (microseconds): 4657 Network bytes per CPU second: 0 Tunnel bytes per CPU second: 0 2016-01-20 16:00:02 EVENT: DISCONNECT_PENDING 2016-01-20 16:00:02 ----- OpenVPN Stop ----- I recheck my ca certificate is: PKCS #1 SHA-512 With RSA Encryption so how to resolve it? :(

[quote="discodog62"]I generated a 8096 key[/quote] [list]You mean [b]4096 bit[/b] key .. right ?[/list]

PolarSSL: error parsing ca certificate:

blitzer

I'm using OpenVPN with self-signed cert on PC. Now i try to import it to my iphone 5s (9.2) and ipad (9.2) through itunes. It's OK but when i try to connect VPN, I get this error:

2016-01-20 16:00:02 ----- OpenVPN Start -----
OpenVPN core 3.0 ios arm64 64-bit
2016-01-20 16:00:02 EVENT: CORE_ERROR PolarSSL: error parsing ca certificate : PK - The pubkey tag or value is invalid (only RSA and EC are supported) [ERR]
2016-01-20 16:00:02 Raw stats on disconnect:
2016-01-20 16:00:02 Performance stats on disconnect:
CPU usage (microseconds): 4657
Network bytes per CPU second: 0
Tunnel bytes per CPU second: 0
2016-01-20 16:00:02 EVENT: DISCONNECT_PENDING
2016-01-20 16:00:02 ----- OpenVPN Stop -----

I recheck my ca certificate is: PKCS #1 SHA-512 With RSA Encryption
so how to resolve it? 🙁

discodog62

I am having the same error. I can use the same profile on my Macbook and connect to my OpenVPN server with no issues. I have my all my certs in the profile using tags( <ca></ca>). When I copy the same profile to my IPhone I am getting your same error.

I have tried adding the CA cert as a separate file with no luck as well. Are there any other options to try?

I generated a 8096 key. Does anyone know if that might cause an issue?

Traffic

discodog62 wroteI generated a 8096 key

You mean 4096 bit key .. right ?

discodog62

My bad I actually made the key size 8192. I will try a 4096 and see if that makes a difference.

Noxx

Did it work with 4096 ? I have the same error as you with 8192, funny because the same config perfectly works on an Android tablet...