• October 18, 2019, 01:43:01 AM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: Certificate key (PEM) for OpenVPN  (Read 22032 times)

danilovav

  • Level 4 Member
  • ****
  • Posts: 424
  • Alexandr Danilov
Certificate key (PEM) for OpenVPN
« on: October 21, 2012, 07:59:21 PM »

Good day
I'm using F/W 1.05B53_WW at DSR-250N
Now i need to configure OpenVPN client using certificates
For this client, i have previously created files ca.crt, client.crt, client.key. Last file was converted to PEM format by command openssl rsa -in client.key -out client.pem
At the "OpenVPN auth" menu, i've uploaded CA/client certificates (CRT files) normally, but client key (PEM) always failed with message "upload failed"
How do i need to prepare PEM file to be able upload this?
Logged
BR, Alexandr Danilov

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 47844
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Certificate key (PEM) for OpenVPN
« Reply #1 on: October 22, 2012, 07:35:24 AM »

You should contact D-Link supported direct, level 2, about this.
« Last Edit: October 28, 2012, 01:43:41 PM by FurryNutz »
Logged
Cable:200mb/10Mb>NetGear C7800>DIR-882>DGS-1100>HP 24pt Gb Switch. COVR-3902/2202/1203,DIR-2680,890L,882,880L,868L,DNR-202L,DNS-345x2,DCS-933L,936L and 960L.
Go Here>Router Troubleshooting

danilovav

  • Level 4 Member
  • ****
  • Posts: 424
  • Alexandr Danilov
Re: Certificate key (PEM) for OpenVPN
« Reply #2 on: October 27, 2012, 11:34:23 PM »

Any news about this issue?
Logged
BR, Alexandr Danilov

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 47844
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Certificate key (PEM) for OpenVPN
« Reply #3 on: October 28, 2012, 01:43:20 PM »

Have you contacted DLink support level 2 yet?
Logged
Cable:200mb/10Mb>NetGear C7800>DIR-882>DGS-1100>HP 24pt Gb Switch. COVR-3902/2202/1203,DIR-2680,890L,882,880L,868L,DNR-202L,DNS-345x2,DCS-933L,936L and 960L.
Go Here>Router Troubleshooting

danilovav

  • Level 4 Member
  • ****
  • Posts: 424
  • Alexandr Danilov
Re: Certificate key (PEM) for OpenVPN
« Reply #4 on: October 28, 2012, 01:53:29 PM »

Actually, my local D-Link office had no direct idea about this.
They propose to try certificates generated by other solution, but i'm not sure will it help or not.

How can i contact any global support?
Logged
BR, Alexandr Danilov

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 47844
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Certificate key (PEM) for OpenVPN
« Reply #5 on: October 28, 2012, 01:59:19 PM »

I would try email support if you haven't done that already. If you dont' seem to get any feedback, let me know and I'll forward this onto D-Link USA here and see if anyone here can help. You might try submitting a email ticket on the U.S. site and see if you get any feedback.
Logged
Cable:200mb/10Mb>NetGear C7800>DIR-882>DGS-1100>HP 24pt Gb Switch. COVR-3902/2202/1203,DIR-2680,890L,882,880L,868L,DNR-202L,DNS-345x2,DCS-933L,936L and 960L.
Go Here>Router Troubleshooting

Thiesy

  • Level 1 Member
  • *
  • Posts: 5
Re: Certificate key (PEM) for OpenVPN
« Reply #6 on: November 18, 2012, 11:44:34 AM »

A few days ago I installed FW 1.05B73 and finally got my openVPN server running. I also am using certificates/keys generate with scripts supplied with the openVPN software for Win from Openvpn.net.

I also experienced the problem you describe.

I solved it with the free software from Christian Hohnstädt at http://xca.sourceforge.net/

I imported the key and exported it into PEM format using the PKCS#8 option. The generated file worked with the above FW.


Jörg
« Last Edit: November 18, 2012, 11:46:18 AM by Thiesy »
Logged
DSR-250N
DAP-1522
DAP-2310
DGS-1210-16

nickaardo

  • Level 1 Member
  • *
  • Posts: 3
Re: Certificate key (PEM) for OpenVPN
« Reply #7 on: November 22, 2012, 12:23:30 PM »

worked for me too...
Thanks for this important tip !
Logged

ddywz

  • Level 1 Member
  • *
  • Posts: 12
Re: Certificate key (PEM) for OpenVPN
« Reply #8 on: December 07, 2012, 08:07:46 AM »

FW version 1.05B73 is posted on german support site of DLink.  Does anyone know if it is ok to upgrade to this version a US based router?  Latest version posted for US is 1.05B20.  Does FW 1.05B73 has an english language menu?

I'd like to setup OpenVPN and I read that only this new version of fw works fine for it.

Thanks,
« Last Edit: December 07, 2012, 08:24:57 AM by ddywz »
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 47844
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Certificate key (PEM) for OpenVPN
« Reply #9 on: December 07, 2012, 08:51:27 AM »

I see that EN and ALL is in the file name. I presume it would work and is in English or has English language UI options. DSR-250N_fw_revALL_1-05B73_all_en_20121112

Read the release notes file for fixes.
I would play it safe, save off the current configruation to file, then do a factory reset, update FW, Factory reset once more then configure the router from scratch. There maybe differences between the FW versions and config files that may warrant a clean setup from scratch.

Let us know how it works for you.
« Last Edit: December 07, 2012, 08:56:53 AM by FurryNutz »
Logged
Cable:200mb/10Mb>NetGear C7800>DIR-882>DGS-1100>HP 24pt Gb Switch. COVR-3902/2202/1203,DIR-2680,890L,882,880L,868L,DNR-202L,DNS-345x2,DCS-933L,936L and 960L.
Go Here>Router Troubleshooting

danilovav

  • Level 4 Member
  • ****
  • Posts: 424
  • Alexandr Danilov
Re: Certificate key (PEM) for OpenVPN
« Reply #10 on: December 07, 2012, 11:49:59 AM »

There are only one special logic - if you upgrade F/W to different region with previous one, device will be reseted to defaults. So, it seems maximum problem you can get.
Logged
BR, Alexandr Danilov