openVPN generated incorrect certs generated, key too small
![](/avatar/default.png)
OpenVPN profiles, especially certs are too small, which causing unable to establish connection from modern Linux operating systems, like RHEL9 or Fedora 39.
Error is specifically:
OpenSSL: error:0A00018F:SSL routines::ee key too small:
So, is there a way, to customize the size of pem key during generating, or any settings which could be set in .openvpn file?
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
I'm happy to hear that.
- Copy Link
- Report Inappropriate Content
@pepicheck The second option DID NOT WORK!! Only the first option worked.
I added the tls-cipher TLS-DHE-RSA-WITH-AES-128-CBC-SHA to the generated .ovpn file (above and after cipher AES-128-CBC) and then importing to settings but it did not work
client
dev tun
auth-nocache
proto udp
float
nobind
cipher AES-128-CBC
tls-cipher TLS-DHE-RSA-WITH-AES-128-CBC-SHA
comp-lzo adaptive
resolv-retry infinite
persist-key
persist-tun
verb 3
remote XXXXXXXXXXXXXX
Device Firmware Version:1.18.0 0.9.1 v009e.0 Build 241018 Rel.43535n
Device Hardware Version:Archer VR2100v v1 00000000
Any idea why the option 2 did not work for me?
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
@ELAMeri Error message? Distro what you have???
- Copy Link
- Report Inappropriate Content
Same error on a MacBook running Sonoma 15.3
Eventualy reset the OpenVPN client settings to defaults and the issue was solved.
But what puzzled me is that the same OpenVPN setup on multiple Omada controller setups - and only one of them was returning the error message, using the same OpenVPN client app. Of course, all controllers updated to the latest version.
At least it's fixed.
Hopefully this will help someone in the near future.
- Copy Link
- Report Inappropriate Content
![](/avatar/default.png)
Information
Helpful: 4
Views: 7411
Replies: 25
Voters 1
![voter's avatar](/avatar/avatar-13.png)