I made this post https://forum.opnsense.org/index.php?topic=32152.0 (https://forum.opnsense.org/index.php?topic=32152.0) over in the VPN forum and for the life of me, I can not get an .ovpn file generated that has the CA data in there. I want to use the OpenVPN Client and not Viscosity.
I re-read the documentation on setting up the OpenVPN server and deleted everything and started fresh but I always end up with a .ovpn file that lacks the CA info. Heck, it even lacks the key and cert info.
I had an Asus router before and setting up OpenVPN on that thing was a breeze. Clicked a few buttons and minutes later, I had a properly formatted .ovpn file that imported into the OpenVPN client and away it went. I was comparing the Asus generated .ovpn file to the one created in OPNsense and I don't see any of those 3 sections I mentioned above (ca, key, cert) in the OPNsense .ovpn file.
I put the Asus in access point mode and want to use OPNsense but something is messed up. Either I totally suck at following directions, the OPNsense documentation is wrong or there's a bug somewhere with 23.1. :)
BTW, this is a fresh install of 23.1.
Does OPNsense offer fee based tech support for one-off issues? I just need somebody on a TeamViewer session for like 5 minutes to walk me through this. Anything cheaper than the $300/year option? Like $50 per incident? I'm just a single user at my house and want to use OpenVPN to get into my network when I'm on the road.
it will generate .ovpn file and that is what you need
to connect, unless there are other problems
It creates the .ovpn file but it's invalid. (Missing the cert, key and ca sections.)
BUT, good news though. I was talking to another user on here about getting a referral code for Zenarmor and explained my problems getting OpenVPN working and he linked me to this guide: https://homenetworkguy.com/how-to/configure-openvpn-opnsense/ (https://homenetworkguy.com/how-to/configure-openvpn-opnsense/) and.......... I was able to create a valid .ovpn file following those steps. :) Super happy now!
One thing I did not do this time around was use the wizard to create the OpenVPN server. Maybe there's a bug in that code?
thats good news