IOS: Failed to Parse Profile error. Ca.crt, client.crt client.key

campbellav

New to group.
Do Only Good Everyday

I am trying to use OpenVPN on my IOS.
I get Failed to Parse profile
When compared to TincanTech expample I
Searched a bunch and only found a couple posts with similar info.
Here is my Openfile.

client
dev tun
proto udp
remote 73.243.75.11 12973
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
cipher AES-128-CBC
comp-lzo
verb 5

I tried Passepartout and got this message
the configuration file contains unsupported option (external file: "ca ca.crt"

Thanks in adavance

TinCanTech

Use inline tags: https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage#lbAW

sero9019

In case someone stumbles into this issue.

you need to delete these entries in your client.ovpn file:

ca ca.crt
cert client.crt
key client.key

cheers

taxelas

What worked for me is to include certificates in the .ovpn file.
to do so I copy pasted the text from certificates into ovpn file and delete links to the file certificates:

 ca ca.crt
 cert client.crt
 key client.key

*no "inline" reference is needed
certificates should be in the end of the config:

<ca>
-----BEGIN CERTIFICATE-----
XXXXXXXXX
-----END CERTIFICATE-----
</ca>

<cert>
-----BEGIN CERTIFICATE-----
XXXXXXX
-----END CERTIFICATE-----
</cert>

<key>
-----BEGIN RSA PRIVATE KEY-----
XXXXXXX
-----END RSA PRIVATE KEY-----
</key>

unominda_admins

Hi, thanks really a lot!!!!

taxelas wrote What worked for me is to include certificates in the .ovpn file.
to do so I copy pasted the text from certificates into ovpn file and delete links to the file certificates:

 ca ca.crt
 cert client.crt
 key client.key

*no "inline" reference is needed
certificates should be in the end of the config:

<ca>
-----BEGIN CERTIFICATE-----
XXXXXXXXX
-----END CERTIFICATE-----
</ca>

<cert>
-----BEGIN CERTIFICATE-----
XXXXXXX
-----END CERTIFICATE-----
</cert>

<key>
-----BEGIN RSA PRIVATE KEY-----
XXXXXXX
-----END RSA PRIVATE KEY-----
</key>