Hi. My client .ovpn profile had an embedded unencrypted client key and I've become concerned of its protection because I own Windows Home and FS encryption or Bitlocker are unavailable in this version. I encrypted the key with: [code]openssl rsa -aes256 -in your.key -out your.encrypted.key[/code] and replaced the embedded key with the line: [code]key your.encrypted.key[/code] Now OpenVPN Connect fails with: "pkey::parse_pem: error in private key:: error:1c800064:provider routines::bad decrypt / error:11800074:PKCS12 routines::pkcs12 cipherfinal error" OpenVPN GUI still works with the same profile: it prompts for the key password as expected. [img]https://i.stack.imgur.com/T3cUh.png[/img] OpenVPN Connect version 3.4.0

bad decrypt error for encrypted client key

basinilya

Hi.
My client .ovpn profile had an embedded unencrypted client key and I've become concerned of its protection because I own Windows Home and FS encryption or Bitlocker are unavailable in this version.

I encrypted the key with:

openssl rsa -aes256 -in your.key -out your.encrypted.key

and replaced the embedded key with the line:

key your.encrypted.key

Now OpenVPN Connect fails with: "pkey::parse_pem: error in private key:: error:1c800064:provider routines::bad decrypt / error:11800074:PKCS12 routines::pkcs12 cipherfinal error"

OpenVPN GUI still works with the same profile: it prompts for the key password as expected.

OpenVPN Connect version 3.4.0

bradm

I have the same issue that I posted about on the new forums here. Whats odd is I don't have the issue on Windows, but a co-worker does.

If I use their profile on my machine it works. If they use my profile on their machine it does not work. We can't see much difference between between the two machines. Windows updates are a few months apart, same version of OpenVPN Connect.

OpenVPN GUI works fine for them with their profile. I don't have any issues with OpenVPN Connect on macOS, iOS, or Android. So I don't think its a profile problem, but a problem with the OpenVPN Connect client for Windows and how it is handling passwords.