static_key_parse_error

[Tanubis]

Hi All,

Trying to set up the VPN to work through iOS. Configuration files and keys work fine in linux to establish a connection, but when I drag through iTunes I get the following error:

Code: Select all

------ OpenVPN Start -----
EVENT: CORE_ERROR
static_key_parse_error [ERR]
Raw stats on disconnect
...
----- OpenVPN Stop -----

I have tried copying the files over several times, and have tried running the files through unix2dos before copying them over to the windows machine I have iTunes installed on. I've verified that after changing my vpn.conf file that I use on the linux distro into vpn.ovpn, the windows machine is able to connect fine.

The configuration I have looks like this:

Code: Select all

dev             tun0
proto           udp
port            12111
resolv-retry    infinite
remote          XXX.XXXXX.XXX 12109


pull

comp-lzo

tun-mtu         1500
fragment        1300
mssfix          1300

tls-client
tls-auth        XXXXX.secret
ca              XX.XXXXX.XXXXX.crt.pem
cert            XXXX.crt.pem
key             XXXX.key.pem

ping            5
ping-restart    60
ping-timer-rem
persist-tun
persist-key

verb            5

Any help would be appreciated!

[croco]

I have the same problem :/

Do you find a solution ?

[robnunin]

Hi

Me too, both on Ipad and Android smartphone.

In Ipad device certificate and key are stored into the device.
CA cert is instead into config file .ovpn

In Android phone all certificates and key are inside profile.

Same error: static_key_parse_error.

Someone has the verified solution ? I'm quite sure that depends on method used to configure profile, but tried more than one time and with different transfer from host to devices the profile, but no change.

Error is immediate, devices do not attempt to establish connection, that indicate error in config.

But what ?

Thanks for atttention.

Roberto

[zamana]

Ok!

I know, I know: this thread is more than a year and a half old, but as I just saw it before fixing (sort of) this problem, here is my contribution to the eternity:

I somewhat "fixed" the issue by creating a self signed certifcate with "openssl pkcs12 (...)" (see this: https://goo.gl/x2NyPy) and then changing my .ovpn file to contain, beyond the basic, only the <ca>(...)</ca> inline part. The rest is taking from the .p12 certificate.

Send both files (.ovpn and .p12) to your e-mail, install the certificate first and then import your .ovpn profile, link it with the certificate that is in your keychain already, and you're good to go. This process is better explained in the FAQ itself: https://docs.openvpn.net/docs/openvpn-c ... s-faq.html (look for "p12" in the text)..

Hope this helps.

Regards.