Easier self generated cert import?

[jago25_98]

I'm running my own OpenVPN server on Gentoo.
As far as I can tell the "OpenVPN Connect" app is not designed for this situation, no?

As a result I've started using "OpenVPN for Android" by Arne Schwabe. I guess this is not to be discussed on this forum? If it is... well the problem I have is that my client1.key and client1.crt are not recognised as certificates. But when I read them in a text editor they look fine. Both files have a

-----BEGIN PRIVATE KEY-----
and
-----END PRIVATE KEY-----
with the key between them.

The client1.crt has:

Code: Select all

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=UK, ST=(censored), L=(censored), O=(censored), OU=changeme, CN=changeme/name=changeme/emailAddress=mail@host.domain
        Validity
            Not Before: Aug  7 21:48:59 2013 GMT
            Not After : Aug  5 21:48:59 2023 GMT
        Subject: C=UK, ST=(censored), L=(censored), O=(censored), OU=changeme, CN=Phones/name=changeme/emailAddress=mail@host.domain
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                  (censored)
                Exponent: (censored)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSEEnter one-line summary
            Netscape Comment: 
                Easy-RSA Generated Certificate
            X509v3 Subject Key Identifier: 
                (censored)
            X509v3 Authority Key Identifier: 
                keyid:(censored)
                
DirName:/C=UK/ST=DO/L=(censored)/O=(censored)/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
                serial:(censored)

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication
            X509v3 Key Usage: 
                Digital Signature
    Signature Algorithm: sha1WithRSAEncryption
         b6:(censored)

Is there an easier way to setup the server to aviod this?

[cyberbat]

I have openvpn server on gentoo too. I can use both vpn solutions under android. The easiest way is to use inline certificates. Look at "INLINE FILE SUPPORT" part here.