openVPN generated incorrect certs generated, key too small
OpenVPN profiles, especially certs are too small, which causing unable to establish connection from modern Linux operating systems, like RHEL9 or Fedora 39.
Error is specifically:
OpenSSL: error:0A00018F:SSL routines::ee key too small:
So, is there a way, to customize the size of pem key during generating, or any settings which could be set in .openvpn file?
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
I'm happy to hear that.
- Copy Link
- Report Inappropriate Content
@pepicheck The second option DID NOT WORK!! Only the first option worked.
I added the tls-cipher TLS-DHE-RSA-WITH-AES-128-CBC-SHA to the generated .ovpn file (above and after cipher AES-128-CBC) and then importing to settings but it did not work
client
dev tun
auth-nocache
proto udp
float
nobind
cipher AES-128-CBC
tls-cipher TLS-DHE-RSA-WITH-AES-128-CBC-SHA
comp-lzo adaptive
resolv-retry infinite
persist-key
persist-tun
verb 3
remote XXXXXXXXXXXXXX
Device Firmware Version:1.18.0 0.9.1 v009e.0 Build 241018 Rel.43535n
Device Hardware Version:Archer VR2100v v1 00000000
Any idea why the option 2 did not work for me?
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
@ELAMeri Error message? Distro what you have???
- Copy Link
- Report Inappropriate Content
Information
Helpful: 4
Views: 7219
Replies: 24
Voters 1
