Bug: certificate signing request vs. import certificate with client export openVPN

Started by grapes2331, May 07, 2026, 07:29:03 AM

Previous topic - Next topic
I just spent a lot of time trying to figure out why my user's certs would not show up in the client export in OpenVPN. I verified the certificate was correct and everything was matching, and the OPNsense GUI recognized it as a certificate associated with the user just fine, but it still would not show up in the client export. I reverted to creating the OPNsense config files manually. I had another OPNsense box I'm using, and I did another cert sign request from there, then imported it into my other box, and the client export showed up just fine. While on the other box where I did the cert sign request it did not show up in client export.

The issue was that when you generate a certificate using the certificate sign request, it will not show up in the client export. However, if you do an import of that same certificate, it will then show up in the client export. So there's some bug with client export and certificate sign requests vs. import certificate.

UPDATE: Yup, I just deleted the certificate sign request cert entry then reimported the same cert under the import certificate dropdown and the cert then appeared inside the client export when it wasn't before.