search

angristan / openvpn-install

Set up your own OpenVPN server on Debian, Ubuntu, Fedora, CentOS or Arch Linux.
https://stanislas.blog
MIT License
13.5k stars 2.95k forks source link

Issues when creating OVPN profile files - missing "-----END CERTIFICATE-----" statements. #676

Open kiros-sc opened 4 years ago

kiros-sc commented 4 years ago

Hello guys, I hope this isn't a repeated issue ticket. Two users in my company had issues with their "ovpn" profile files. At first I only notices the different length of the second certificate block, but after more in details I also noted the missing

"-----END CERTIFICATE-----" statement for the second certificate. This happened with 2 users which already existed and lost their cert, so, I revoke their permissions, and minutes later, create them a new profile file using the same user name. When using a different username the issue did not happen again, but, in other of our VPN have done similar steps:

1- revoke permissions for a user 2- created a new ovpn file for the same person, same username.

And in that case, no issues. I'm trying to reproduce the issue but unfortunately, I'm not getting there.

Does this happen/ to you or anybody else? Again, I hope the ticket is not repeated.

kiros-sc commented 4 years ago

Hi, @angristan I guess you didn't have the time to check this, but, something I wanted to remark is the difference of "LENGHT" between a functional "profile-file" and one with issues.

SeinopSys commented 2 years ago

I am also seeing the same issue on the latest Raspberry Pi OS after upgrading from Raspbian 9, the generated .ovpn file has a bogus section with only -----BEGIN CERTIFICATE----- followed by 2 lines of normal looking certificate code and then a closing </cert> without an end marker. I have no clue what the root cause is.