Page 1 of 1

PolarSSL: error parsing ca certificate:

Posted: Wed Jan 20, 2016 12:26 pm
by blitzer
I'm using OpenVPN with self-signed cert on PC. Now i try to import it to my iphone 5s (9.2) and ipad (9.2) through itunes. It's OK but when i try to connect VPN, I get this error:

2016-01-20 16:00:02 ----- OpenVPN Start -----
OpenVPN core 3.0 ios arm64 64-bit
2016-01-20 16:00:02 EVENT: CORE_ERROR PolarSSL: error parsing ca certificate : PK - The pubkey tag or value is invalid (only RSA and EC are supported) [ERR]
2016-01-20 16:00:02 Raw stats on disconnect:
2016-01-20 16:00:02 Performance stats on disconnect:
CPU usage (microseconds): 4657
Network bytes per CPU second: 0
Tunnel bytes per CPU second: 0
2016-01-20 16:00:02 EVENT: DISCONNECT_PENDING
2016-01-20 16:00:02 ----- OpenVPN Stop -----

I recheck my ca certificate is: PKCS #1 SHA-512 With RSA Encryption
so how to resolve it? :(

Re: PolarSSL: error parsing ca certificate:

Posted: Tue May 03, 2016 9:37 am
by discodog62
I am having the same error. I can use the same profile on my Macbook and connect to my OpenVPN server with no issues. I have my all my certs in the profile using tags( <ca></ca>). When I copy the same profile to my IPhone I am getting your same error.

I have tried adding the CA cert as a separate file with no luck as well. Are there any other options to try?

I generated a 8096 key. Does anyone know if that might cause an issue?

Re: PolarSSL: error parsing ca certificate:

Posted: Tue May 03, 2016 11:27 am
by Traffic
discodog62 wrote:I generated a 8096 key
  • You mean 4096 bit key .. right ?

Re: PolarSSL: error parsing ca certificate:

Posted: Tue May 03, 2016 7:30 pm
by discodog62
My bad I actually made the key size 8192. I will try a 4096 and see if that makes a difference.

Re: PolarSSL: error parsing ca certificate:

Posted: Sat May 21, 2016 6:51 pm
by Noxx
Did it work with 4096 ? I have the same error as you with 8192, funny because the same config perfectly works on an Android tablet...