Client export list is empty on v 2.3.2

tstorm

In the client export tab did you click the button save as default? When I did this, all of my clients reappeared.

robina80

what a dumb arse, i had the user but deleted the user cert, after that when i went back to client exports, the list was there

Derelict

You're not being dumb.

We have all wanted saving those preferences in the exporter. Looks like it's finally happening.

Might be a better way to handle that though.

johnpoz

Yeah I like the addition of the default.

qinohe

pfSense-pkg-openvpn-client-export: 1.3.12 -> 1.3.13 [pfSense]

Just updated, I can export configs again, thanks.

But pffft, I thought it was me so I created the whole ca-crt chain again, there are a few, than I saw the update ::)

JonH

This worked the first time I did it however I decided to go back and make some changes and start all over.

Now, the User Cert does not appear in the list at the bottom. >:(

I'm have 1.3.13 installed and a User Certificate. I have saved the default.
It no longer shows up….

Maybe I need to delete all the certs, including the CA?
I must be doing something stupid, it should not be this difficult.

Derelict

Depends on what changes you made.

It still will not show you users with certificates issued by a CA other than the one set in the server since that wouldn't work anyway.

JonH

I used the Wizard to make the Server and just not going back and looking it make 'remote access' instead of peer/peer.
Must have made mistake in that selection.

I'll delete it all and try again tomorrow.

Derelict

Client export is for remote access, not peer-to-peer.

JonH

OK, my bad.
What I am trying to do is set up openVPN for access from iPhone (ios)

I had it working but with a bunch of questionable errors in the log.
I had created my .conf by hand. I recently read here that the wizard needed to be used to make sure all was properly done.
So started over and blew it by choosing peer/peer. Lesson - don't do this stuff late at night. :P

My mistake was:

setting up server for peer/peer tls instead of remote tls.
creating a client, not necessary cause export creates it. Changing server to 'remote tls' and going directly to client export gives me the missing part of the puzzle.

Thanks for pointing me in the right direction.