Passphrase required for PKCS#12 iPhone client

Post Reply
larry.menard
OpenVpn Newbie
Posts: 5
Joined: Sun Apr 15, 2018 6:37 pm

Passphrase required for PKCS#12 iPhone client

Post by larry.menard » Sun Apr 15, 2018 7:08 pm

I am brand new to OpenVPN. Trying to test a very simple connection from my iPhone 7 client to my server (running on Windows 10 32-bit). Web page https://openvpn.net/index.php/open-sour ... tml#config said the simplest test for proof-of-concept is the Static Key method (https://openvpn.net/index.php/open-sour ... howto.html), so that is what I'm trying to follow.

Server's "server.ovpn" file contains only:

Code: Select all

dev tun
ifconfig 10.8.0.1 10.8.0.2
secret static.key
Just like the web page said.

I generated a static key file ("openvpn --genkey --secret static.key") and put it in the server's "config" directory.

Just like the web page said.

Then I created a client config file "client.ovpn12", containing (I substitute my actual hostname and domain in the "remote" field):

Code: Select all

remote hostname.domain
dev tun
ifconfig 10.8.0.2 10.8.0.1
secret static.key
Just like the web page said.

Note that the web page did *not* mention that:

* the extension has to be "ovpn12", not just "ovpn"
* the file should *not* be in the server's "config" directory.

I emailed that file to myself, opened the email on the iPhone, and sent the attachment to the OpenVPN Connect client. The OpenVPN Connect client opens up and tells me that there is a new profile available.

I tap the "+" button to accept the profile, and it prompts me with:
Passphrase required for client.ovpn12
Enter PKCS#12 passphrase:
OK
What passphrase is it talking about? Nowhere in the above was there any mention of a passphrase.

If I just tap "OK" it says:
Error during PKCS#12 import
Can't parse file
OK
At this time, my iPhone and Windows 10 system are on the same local network.

Yes port 1194 in my firewall is open in both Windows and and my router.

Any suggestions?

Thanks.

User avatar
TinCanTech
OpenVPN Protagonist
Posts: 4419
Joined: Fri Jun 03, 2016 1:17 pm

Re: Passphrase required for PKCS#12 iPhone client

Post by TinCanTech » Sun Apr 15, 2018 8:20 pm

I do not believe you can use Openvpn for iOS in static key method ..

larry.menard
OpenVpn Newbie
Posts: 5
Joined: Sun Apr 15, 2018 6:37 pm

Re: Passphrase required for PKCS#12 iPhone client

Post by larry.menard » Mon Apr 16, 2018 11:44 am

Thanks TCT. If that is the case, then it would be nice if the Quick Start and/or Static Mini-Key doc actually said that.

I'll try the more complex methods, but that is an area (certificates) I know very little about. :-(

Thanks again.

User avatar
ordex
OpenVPN Inc.
Posts: 268
Joined: Wed Dec 28, 2016 2:32 am

Re: Passphrase required for PKCS#12 iPhone client

Post by ordex » Mon Apr 16, 2018 12:52 pm

whatever the authentication method you decide to use, config files should end with .ovpn
.ovpn12 are PKCS#12 bundles, which is something else.

Some common questions and their answers for Connect for iOS can be found here https://docs.openvpn.net/connecting/con ... nnect-ios/

Post Reply