verify-x509-name error maybe since upgrading to V 3.3.0

markmaus

Hi all,

I have some issues using the OpenVPN App on iOS since 1or 2 weeks, maybe since upgrading the iOS client to 3.3.0.

I can't connect anymore because the app says "verify-x509-name" failed. I didn't change anything on the server side and th OPENVPN-Community Client on my notebooks still works fine with the same configuration and the same certificates.

Any ideas?

Best regards

Mark

markmaus

Found the sollution by myself:

obvisouly quotation marks for the x509-name are not supported anymore. After removing those from my config both, windows and iOS work fine again.

silexime

Nice you found the solution yourself and posted it!

However, i didn't manage so far to make mine work. I have this line:
verify-x509-name 'SN=150313805358, CN=Oxygen Router Server' subject

What should it be converted to, in order to work on iOS?

Thanks!

TinCanTech

markmaus wrote obvisouly quotation marks for the x509-name are not supported anymore

That may be the case for Openvpn-Connect IOS but it is not the case for OpenVPN Community edition.

From the manual:

verify-x509-name 'C=KG, ST=NA, L=Bishkek, CN=Server-1'
verify-x509-name Server-1 name
verify-x509-name Server- name-prefix

Single quotes are supported.

Perhaps a member of the corporate team can explain the apparent difference, which should not exist.

Turisx

Hello,

I also see this issue and others on the forum are reporting this as well.

Various permutations of quotes / non-quotes and single quotes have been tried to no avail. The profile worked in until the update of 3.3.0.

Thanks

IPTRACE

Has someone resolved the issue?