Page 1 of 1
verify-x509-name error maybe since upgrading to V 3.3.0
Posted: Mon Aug 08, 2022 6:50 pm
by markmaus
Hi all,
I have some issues using the OpenVPN App on iOS since 1or 2 weeks, maybe since upgrading the iOS client to 3.3.0.
I can't connect anymore because the app says "verify-x509-name" failed. I didn't change anything on the server side and th OPENVPN-Community Client on my notebooks still works fine with the same configuration and the same certificates.
Any ideas?
Best regards
Mark
Re: verify-x509-name error maybe since upgrading to V 3.3.0
Posted: Mon Aug 08, 2022 6:58 pm
by markmaus
Found the sollution by myself:
obvisouly quotation marks for the x509-name are not supported anymore. After removing those from my config both, windows and iOS work fine again.
Re: verify-x509-name error maybe since upgrading to V 3.3.0
Posted: Wed Aug 10, 2022 4:02 pm
by silexime
Nice you found the solution yourself and posted it!
However, i didn't manage so far to make mine work. I have this line:
verify-x509-name 'SN=150313805358, CN=Oxygen Router Server' subject
What should it be converted to, in order to work on iOS?
Thanks!
Re: verify-x509-name error maybe since upgrading to V 3.3.0
Posted: Wed Aug 10, 2022 5:55 pm
by TinCanTech
markmaus wrote: ↑Mon Aug 08, 2022 6:58 pm
obvisouly quotation marks for the x509-name are not supported anymore
That may be the case for
Openvpn-Connect IOS but it is not the case for
OpenVPN Community edition.
From the manual:
Code: Select all
verify-x509-name 'C=KG, ST=NA, L=Bishkek, CN=Server-1'
verify-x509-name Server-1 name
verify-x509-name Server- name-prefix
Single quotes are supported.
Perhaps a member of the corporate team can explain the apparent difference, which should
not exist.
Re: verify-x509-name error maybe since upgrading to V 3.3.0
Posted: Tue Aug 30, 2022 4:58 pm
by Turisx
Hello,
I also see this issue and others on the forum are reporting this as well.
Various permutations of quotes / non-quotes and single quotes have been tried to no avail. The profile worked in until the update of 3.3.0.
Thanks
Re: verify-x509-name error maybe since upgrading to V 3.3.0
Posted: Fri Nov 04, 2022 9:47 pm
by IPTRACE
Has someone resolved the issue?