PolarSSL: error parsing ca certificate:

Official client software for OpenVPN Access Server and OpenVPN Cloud.
Post Reply
blitzer
OpenVpn Newbie
Posts: 1
Joined: Wed Jan 20, 2016 12:15 pm

PolarSSL: error parsing ca certificate:

Post by blitzer » Wed Jan 20, 2016 12:26 pm

I'm using OpenVPN with self-signed cert on PC. Now i try to import it to my iphone 5s (9.2) and ipad (9.2) through itunes. It's OK but when i try to connect VPN, I get this error:

2016-01-20 16:00:02 ----- OpenVPN Start -----
OpenVPN core 3.0 ios arm64 64-bit
2016-01-20 16:00:02 EVENT: CORE_ERROR PolarSSL: error parsing ca certificate : PK - The pubkey tag or value is invalid (only RSA and EC are supported) [ERR]
2016-01-20 16:00:02 Raw stats on disconnect:
2016-01-20 16:00:02 Performance stats on disconnect:
CPU usage (microseconds): 4657
Network bytes per CPU second: 0
Tunnel bytes per CPU second: 0
2016-01-20 16:00:02 EVENT: DISCONNECT_PENDING
2016-01-20 16:00:02 ----- OpenVPN Stop -----

I recheck my ca certificate is: PKCS #1 SHA-512 With RSA Encryption
so how to resolve it? :(

discodog62
OpenVpn Newbie
Posts: 2
Joined: Fri Oct 01, 2010 12:31 pm

Re: PolarSSL: error parsing ca certificate:

Post by discodog62 » Tue May 03, 2016 9:37 am

I am having the same error. I can use the same profile on my Macbook and connect to my OpenVPN server with no issues. I have my all my certs in the profile using tags( <ca></ca>). When I copy the same profile to my IPhone I am getting your same error.

I have tried adding the CA cert as a separate file with no luck as well. Are there any other options to try?

I generated a 8096 key. Does anyone know if that might cause an issue?

User avatar
Traffic
OpenVPN Protagonist
Posts: 4066
Joined: Sat Aug 09, 2014 11:24 am

Re: PolarSSL: error parsing ca certificate:

Post by Traffic » Tue May 03, 2016 11:27 am

discodog62 wrote:I generated a 8096 key
  • You mean 4096 bit key .. right ?

discodog62
OpenVpn Newbie
Posts: 2
Joined: Fri Oct 01, 2010 12:31 pm

Re: PolarSSL: error parsing ca certificate:

Post by discodog62 » Tue May 03, 2016 7:30 pm

My bad I actually made the key size 8192. I will try a 4096 and see if that makes a difference.

Noxx
OpenVpn Newbie
Posts: 1
Joined: Sat May 21, 2016 6:44 pm

Re: PolarSSL: error parsing ca certificate:

Post by Noxx » Sat May 21, 2016 6:51 pm

Did it work with 4096 ? I have the same error as you with 8192, funny because the same config perfectly works on an Android tablet...

Post Reply