OPNsense Forum

English Forums => Virtual private networks => Topic started by: Legremlins_keitaro on April 29, 2021, 12:31:34 PM

Title: OpenVPN server & OpenVPN Connect problem
Post by: Legremlins_keitaro on April 29, 2021, 12:31:34 PM
Hi Guys,
Having a little problem. I have setup my OpenVPN server on my opnsense since few month, all is working fine if I use OpenVPNGUI. Today I try to import my profile and CA to OpenVPN Connect and it doesn't work...
Do I need to change my configuration to made my profile working with OpenVPN Connect or is it something special to configure on the server part?
Thanks for your help :)
Title: Re: OpenVPN server & OpenVPN Connect problem
Post by: juere on April 29, 2021, 05:34:55 PM
Have you tried exporting your config under "VPN->OpenVPN->Client Export" using Export Type = File Only ?
This generates a single config file containing "inline" ca+certs, usually this should work with OpenVPN-Connect client.
Title: Re: OpenVPN server & OpenVPN Connect problem
Post by: Legremlins_keitaro on April 29, 2021, 06:15:46 PM
Yes I do that but it says missing external certificate
Title: Re: OpenVPN server & OpenVPN Connect problem
Post by: juere on April 29, 2021, 06:24:31 PM
The generated config file should contain something like


...
<ca>
-----BEGIN CERTIFICATE-----
{your ca cert}
-----END CERTIFICATE-----
</ca>
..
<cert>
-----BEGIN CERTIFICATE-----
{your client cert}
-----END CERTIFICATE-----
</cert>
...
<key>
-----BEGIN PRIVATE KEY-----
{your client key}
-----END PRIVATE KEY-----
</key>
..


Are the sections <ca>, <cert> and <key> filled correctly ?

If you are not using client certs you might want to add


client-cert-not-required


under "Custom Config" before exporting, see

https://forum.opnsense.org/index.php?topic=14687.0 (https://forum.opnsense.org/index.php?topic=14687.0)
Title: Re: OpenVPN server & OpenVPN Connect problem
Post by: Legremlins_keitaro on April 29, 2021, 07:05:42 PM
Yes I have checked and ovpn file is filled :)
Title: Re: OpenVPN server & OpenVPN Connect problem
Post by: Legremlins_keitaro on April 29, 2021, 07:11:02 PM
So now it works but it keep saying missing external certificate :( If I hit continue it work i can connect. need to figure why if I add ovpn file and ca files it doesn't work