D-Link Forums

D-Link VPN Router => DSR-250N => Topic started by: danilovav on October 21, 2012, 07:59:21 PM

Title: Certificate key (PEM) for OpenVPN
Post by: danilovav on October 21, 2012, 07:59:21 PM

Good day
I'm using F/W 1.05B53_WW at DSR-250N
Now i need to configure OpenVPN client using certificates
For this client, i have previously created files ca.crt, client.crt, client.key. Last file was converted to PEM format by command openssl rsa -in client.key -out client.pem
At the "OpenVPN auth" menu, i've uploaded CA/client certificates (CRT files) normally, but client key (PEM) always failed with message "upload failed"
How do i need to prepare PEM file to be able upload this?

Title: Re: Certificate key (PEM) for OpenVPN
Post by: FurryNutz on October 22, 2012, 07:35:24 AM

You should contact D-Link supported direct, level 2, about this.

Title: Re: Certificate key (PEM) for OpenVPN
Post by: danilovav on October 27, 2012, 11:34:23 PM

Any news about this issue?

Title: Re: Certificate key (PEM) for OpenVPN
Post by: FurryNutz on October 28, 2012, 01:43:20 PM

Have you contacted DLink support level 2 yet?

Title: Re: Certificate key (PEM) for OpenVPN
Post by: danilovav on October 28, 2012, 01:53:29 PM

Actually, my local D-Link office had no direct idea about this.
They propose to try certificates generated by other solution, but i'm not sure will it help or not.

How can i contact any global support?

Title: Re: Certificate key (PEM) for OpenVPN
Post by: FurryNutz on October 28, 2012, 01:59:19 PM

I would try email support if you haven't done that already. If you dont' seem to get any feedback, let me know and I'll forward this onto D-Link USA here and see if anyone here can help. You might try submitting a email ticket on the U.S. site and see if you get any feedback.

Title: Re: Certificate key (PEM) for OpenVPN
Post by: Thiesy on November 18, 2012, 11:44:34 AM

A few days ago I installed FW 1.05B73 and finally got my openVPN server running. I also am using certificates/keys generate with scripts supplied with the openVPN software for Win from Openvpn.net.

I also experienced the problem you describe.

I solved it with the free software from Christian Hohnstädt at http://xca.sourceforge.net/

I imported the key and exported it into PEM format using the PKCS#8 option. The generated file worked with the above FW.


Jörg

Title: Re: Certificate key (PEM) for OpenVPN
Post by: nickaardo on November 22, 2012, 12:23:30 PM

worked for me too...
Thanks for this important tip !

Title: Re: Certificate key (PEM) for OpenVPN
Post by: ddywz on December 07, 2012, 08:07:46 AM

FW version 1.05B73 is posted on german support site of DLink.  Does anyone know if it is ok to upgrade to this version a US based router?  Latest version posted for US is 1.05B20.  Does FW 1.05B73 has an english language menu?

I'd like to setup OpenVPN and I read that only this new version of fw works fine for it.

Thanks,

Title: Re: Certificate key (PEM) for OpenVPN
Post by: FurryNutz on December 07, 2012, 08:51:27 AM

I see that EN and ALL is in the file name. I presume it would work and is in English or has English language UI options. DSR-250N_fw_revALL_1-05B73_all_en_20121112

Read the release notes file for fixes.
I would play it safe, save off the current configruation to file, then do a factory reset, update FW, Factory reset once more then configure the router from scratch. There maybe differences between the FW versions and config files that may warrant a clean setup from scratch.

Let us know how it works for you.

Title: Re: Certificate key (PEM) for OpenVPN
Post by: danilovav on December 07, 2012, 11:49:59 AM

There are only one special logic - if you upgrade F/W to different region with previous one, device will be reseted to defaults. So, it seems maximum problem you can get.