[Solved] OpenVPN Setup failing

fx666 · 2018-09-05T15:31:13.151Z

Hi,

I have an AR150 Mini router(updated to Firmware 2.27) here.

I try to set up OpenVPN. When I upload a config-package(as tar.gz)
via web interface, it says “config imported” (See screenshot)

When I afterwards enable the imported config and click “apply” in Webinterface OpenVPN-Client Section, I get this error message: “Can not load certificate file keys/inline.crt”
When I examine the File System on the router via ssh, the ovpn-config file is placed correctly into
/etc/openvpn/inline.ovpn
But my keys/certificates within the keys subfolder of the config-package are not copied to /etc/openvpn. They are located in /tmp/ovpn_upload. So the issue is clear: OpenVPN does not have the key in the correct place.

Is this a bug in the firmware, or should I package the openvpn-config in a different way?

Thanks for any help.

openvpn_imported978×351 55.2 KB

When I copy the keys manually in place and put a wrapper shell script in front of /usr/sbin/openvpn which changes the working directory before starting the openvpn daemon to /etc/openvpn, it works. So basically the config files and keys are ok.

fx666 · 2018-09-05T16:16:54.841Z

At first I want to note that my files are called “inline”.crt .key … That’s because my company has the part “inline” in it’s name.

I googled a solution that shows a working single-file configuration:

gist.github.com

https://gist.github.com/renatolfc/f6c9e2a5bd6503005676

android-client.ovpn

client
dev tun
remote example.com
resolv-retry infinite
nobind
persist-key
persist-tun
ca [inline]
cert [inline]
key [inline]

This file has been truncated. show original

Now I put CA,Key,Cert directly into the file and it works immediately.

alzhao · 2018-09-06T15:46:34.191Z

Thanks very much for sharing

xxxxx