Ios 16.5.1 and new OPENVPN beta, is my config file wrong?

[scriiby]

I'm trying to connect to a azure VPN but I keep getting this error:

Code: Select all

PKey::parse_pem: error in private key:: error:0909006C:PEM routines:get_name:no start line

the certs are self-signed and i think the problem may come from the certifications which I don't really know how to setup correctly to be honest.

Code: Select all

client
remote azuregateway*******************************
remote-cert-tls server

dev tun
proto tcp
resolv-retry infinite
nobind

auth SHA256
cipher AES-256-GCM
persist-key
persist-tun

tls-timeout 30
tls-version-min 1.2
key-direction 1

log openvpn.log
verb 3

# P2S CA root certificate
<ca>
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----
</ca>

# Pre Shared Key
<tls-auth>
-----BEGIN OpenVPN Static key V1-----

-----END OpenVPN Static key V1-----
</tls-auth>

# P2S client certificate
# Please fill this field with a PEM formatted client certificate
# Alternatively, configure 'cert PATH_TO_CLIENT_CERT' to use input from a PEM certificate file.
<cert>
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----
</cert>

# P2S client certificate private key
# Please fill this field with a PEM formatted private key of the client certificate.
# Alternatively, configure 'key PATH_TO_CLIENT_KEY' to use input from a PEM key file.
<key>
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----
</key>

this is my config file with the certificates deleted obviously... any help is appreciated

[leland.ballard]

Did you ever solve this? Having the same issue now as well with iOS. Thanks!

[openvpn_inc]

Hello,

At the bottom there is a section for <key> </key> that is supposed to contain the private key. A private key tends to begin with -----BEGIN PRIVATE KEY---- and not ----BEGIN CERTIFICATE-----. The difference is that a private key is a bit of unique cryptographic data, but a certificate contains things like common name, company name, organization name, and so on, and is signed by a CA with a signature. That is completely different.

Is this a copy/paste error or something? Because the <key> </key> section should never contain -----BEGIN CERTIFICATE----- or such. A certificate does not belong in that section. A private key belongs in that section.

Kind regards,
Johan