CA cert, client cert and key are set inline in the profile, And this profile works fine with Windows client software but can not work with Android.
Here is the error message.
OpenVPN core error: PolarSSL error parsing ca certificate: X509- format not recognized as DER or PEM.
Does anyone know how to fix it? Thanks.
Kevin
PolarSSL: error parsing ca certificate : X509
-
- OpenVpn Newbie
- Posts: 1
- Joined: Wed Nov 01, 2017 6:27 pm
- ordex
- OpenVPN Inc.
- Posts: 444
- Joined: Wed Dec 28, 2016 2:32 am
- Location: IRC #openvpn-devel @ libera.chat
Re: PolarSSL: error parsing ca certificate : X509
can you paste here your <ca> section?
-
- OpenVpn Newbie
- Posts: 1
- Joined: Mon Dec 11, 2017 8:00 am
Re: PolarSSL: error parsing ca certificate : X509
Not trying to hijack this thread. I also have that same message and have the following CA cert info:
-----BEGIN CERTIFICATE-----MIIDJDCCAgygAwIBAgIJAL2pzYvT0xKVMA0GCSqGSIb3DQEBCwUAMBExDzANBgNV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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----MIIDJDCCAgygAwIBAgIJAL2pzYvT0xKVMA0GCSqGSIb3DQEBCwUAMBExDzANBgNV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-----END CERTIFICATE-----
- ordex
- OpenVPN Inc.
- Posts: 444
- Joined: Wed Dec 28, 2016 2:32 am
- Location: IRC #openvpn-devel @ libera.chat
Re: PolarSSL: error parsing ca certificate : X509
I think -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- should go on their own line.