Migrating from OpenVPN Community Edition 2.5.5 to OpenVPN Connect v3 (3.4.4)

Official client software for OpenVPN Access Server and OpenVPN Cloud.
Post Reply
artbybart
OpenVpn Newbie
Posts: 8
Joined: Sat Jan 08, 2022 6:11 am

Migrating from OpenVPN Community Edition 2.5.5 to OpenVPN Connect v3 (3.4.4)

Post by artbybart » Sat Jan 08, 2022 11:40 pm

I have OpenVPN server setup on a Mikrotik RB2011iL (v6.49.2) and I have been using OpenVPN 2.5.5 client from the Community Edition Downloads on my laptops and it works fine. I just had to make sure that 5 files (CA.cert, client.cert, client.key, secret, and openvpn.ovpn files were all in (C:\Program files\OpenVPN\config) directory.

I'm now trying to use OpenVPN Connect v3 (latest 3.3.4), and from what I understand is that I can only use one file which is .ovpn, which contains information from 3 other files (CA.cert, client.cert, and client.key). In other words, I need to use unified format for OpenVPN profiles.

I see a lot of gibberish in all 3 files (CA.cert, client.cert, and client.key) when I open them using Notepad. Do I just copy and paste every one of those files into the .ovpn file? Is there something I need to do on the Mikrotik side?

Thank you for your assistance.

artbybart
OpenVpn Newbie
Posts: 8
Joined: Sat Jan 08, 2022 6:11 am

Re: Migrating from OpenVPN Community Edition 2.5.5 to OpenVPN Connect v3 (3.4.4)

Post by artbybart » Sun Jan 09, 2022 3:20 pm

Just a follow up to let everyone know that I got it to work. Here's what my unified format looks like:

client
dev tun
proto tcp-client
remote <My IP>
port 1194
nobind
persist-key
persist-tun
tls-client
remote-cert-tls server
verb 4
mute 10
cipher AES-256-CBC
auth SHA1
auth-user-pass secret
auth-nocache

redirect-gateway def1

<ca>
-----BEGIN CERTIFICATE-----

Gibberish text

-----END CERTIFICATE-----
</ca>
<cert>
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
serial-text
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Easy-RSA CA
Validity
Not Before: Jan 11 21:51:19 2021 GMT
Not After : Dec 27 21:51:19 2023 GMT
Subject: CN=philipp-pc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
modulus-text
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Subject Key Identifier:
subject-key-text
X509v3 Authority Key Identifier:
keyid:key-id-text
DirName:/CN=Easy-RSA CA
serial:dirname-text

X509v3 Extended Key Usage:
TLS Web Client Authentication
X509v3 Key Usage:
Digital Signature
Signature Algorithm: sha256WithRSAEncryption
signature-text
-----BEGIN CERTIFICATE-----

Gibberish text

-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----

Gibberish text

-----END ENCRYPTED PRIVATE KEY-----
</key>

Post Reply