Asus RT-AC56U Android Client gives: Error message: X509:parse_perm:error in cert::error:0480006C:PEM routines::no start

[Philoctetes]

View OriginalServer Config

1

# Follows is my .ovpn file

2

3

;Brand new to OpenVPN. My only (successful) VPN experience was WAY, WAY back when PPTP was considerable marginally acceptable...so.

4

5

6

7

;The Asus router referenced natively supports use as an OpenVPN server. I followed the advice of a couple of guides to configure the server in the router.

8

9

10

11

;1) generated the .ovpn file

12

13

;2) imported file into the Android OpenVPN client w/o any error message.

14

15

;3) hit "connect" on the Android OpenVPN client and get the following error message:

16

17

18

19

;"Error message: X509:parse_perm:error in cert::error:0480006C:PEM routines::no start line

20

21

22

23

;Reviewed the actual .ovpn file to see if I could spot obvious errors in structure. I'm not sure that the certificate is structured correctly, though I don't know what it SHOULD look like.

24

25

26

27

;I will be grateful if anyone can point me in the right direction. Thank you.

28

29

30

31

;I checked and found:

32

33

34

35

36

37

remote 75.12.34.56 1194

38

39

float

40

41

nobind

42

43

proto udp

44

45

dev tun

46

47

sndbuf 0

48

49

rcvbuf 0

50

51

keepalive 15 60

52

53

comp-lzo adaptive

54

55

auth-user-pass

56

57

client

58

59

auth SHA256

60

61

cipher AES-256-CBC

62

63

ns-cert-type server

64

65

<ca>

66

--STRIPPED INLINE CA CERT--

67

</ca>

68

69

70

71

<cert>

72

--STRIPPED INLINE CERT--

73

</cert>

74

75

76

77

<key>

78

--STRIPPED INLINE KEY--

79

</key>

80

81

82

83

<tls-auth>

84

--STRIPPED INLINE TLS-AUTH KEY--

85

</tls-auth>

86

87

88

1

remote 75.12.34.56 1194

2

float

3

nobind

4

proto udp

5

dev tun

6

sndbuf 0

7

rcvbuf 0

8

keepalive 15 60

9

comp-lzo adaptive

10

auth-user-pass

11

client

12

auth SHA256

13

cipher AES-256-CBC

14

ns-cert-type server

15

<ca>

16

--STRIPPED INLINE CA CERT--

17

</ca>

18

<cert>

19

--STRIPPED INLINE CERT--

20

</cert>

21

<key>

22

--STRIPPED INLINE KEY--

23

</key>

24

<tls-auth>

25

--STRIPPED INLINE TLS-AUTH KEY--

26

</tls-auth>

[Philoctetes]

Surely, SOMEONE is up-to-speed on this? Or is this error so arcane as all that?

[TinCanTech]

https://community.openvpn.net/openvpn/wiki/IOSinline

[Philoctetes]

Thanks. As it turns out, the initial error message disappeared after I began exporting the .ovpn file directly to my TABLET. Maybe there was some corruption of the file in (securely) emailing it to myself and then downloading it to the tablet? No idea. But, from what I could glean from the post to which you linked the key to that person's success was using key-direction 1. For fun, I'll add that line to my file and see what happens, though expectations are low. Was there something else or more fundamental I missed? Easily so, given my lack of expertise.

But, now that I'm no longer getting the original error message, my OpenVPN client complains that my chosen level of security for my certificates is too low. With AES-256-CBC and SHA 512? Don't think so, but my agéd Asus RT-AC56U may be unable to produce an .ovpn file which meets spec for the current OpenVPN client. So, it's back to seeing if that can be sorted. A new router may be in order.

[TinCanTech]

Problems are normally explained in your server or client log files.