verify-x509-name error maybe since upgrading to V 3.3.0

Official client software for OpenVPN Access Server and OpenVPN Cloud.
Post Reply
markmaus
OpenVpn Newbie
Posts: 2
Joined: Mon Aug 08, 2022 6:42 pm

verify-x509-name error maybe since upgrading to V 3.3.0

Post by markmaus » Mon Aug 08, 2022 6:50 pm

Hi all,

I have some issues using the OpenVPN App on iOS since 1or 2 weeks, maybe since upgrading the iOS client to 3.3.0.

I can't connect anymore because the app says "verify-x509-name" failed. I didn't change anything on the server side and th OPENVPN-Community Client on my notebooks still works fine with the same configuration and the same certificates.

Any ideas?

Best regards

Mark

markmaus
OpenVpn Newbie
Posts: 2
Joined: Mon Aug 08, 2022 6:42 pm

Re: verify-x509-name error maybe since upgrading to V 3.3.0

Post by markmaus » Mon Aug 08, 2022 6:58 pm

Found the sollution by myself:

obvisouly quotation marks for the x509-name are not supported anymore. After removing those from my config both, windows and iOS work fine again.

silexime
OpenVpn Newbie
Posts: 1
Joined: Wed Aug 10, 2022 3:57 pm

Re: verify-x509-name error maybe since upgrading to V 3.3.0

Post by silexime » Wed Aug 10, 2022 4:02 pm

Nice you found the solution yourself and posted it!

However, i didn't manage so far to make mine work. I have this line:
verify-x509-name 'SN=150313805358, CN=Oxygen Router Server' subject

What should it be converted to, in order to work on iOS?

Thanks!

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: verify-x509-name error maybe since upgrading to V 3.3.0

Post by TinCanTech » Wed Aug 10, 2022 5:55 pm

markmaus wrote:
Mon Aug 08, 2022 6:58 pm
obvisouly quotation marks for the x509-name are not supported anymore
That may be the case for Openvpn-Connect IOS but it is not the case for OpenVPN Community edition.

From the manual:

Code: Select all

verify-x509-name 'C=KG, ST=NA, L=Bishkek, CN=Server-1'
verify-x509-name Server-1 name
verify-x509-name Server- name-prefix
Single quotes are supported.

Perhaps a member of the corporate team can explain the apparent difference, which should not exist.

Turisx
OpenVpn Newbie
Posts: 2
Joined: Thu Oct 16, 2014 11:00 am

Re: verify-x509-name error maybe since upgrading to V 3.3.0

Post by Turisx » Tue Aug 30, 2022 4:58 pm

Hello,

I also see this issue and others on the forum are reporting this as well.

Various permutations of quotes / non-quotes and single quotes have been tried to no avail. The profile worked in until the update of 3.3.0.

Thanks

IPTRACE
OpenVpn Newbie
Posts: 12
Joined: Sat Dec 31, 2016 12:40 pm

Re: verify-x509-name error maybe since upgrading to V 3.3.0

Post by IPTRACE » Fri Nov 04, 2022 9:47 pm

Has someone resolved the issue?

Post Reply