Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN client export not working

    Scheduled Pinned Locked Moved 2.0-RC Snapshot Feedback and Problems - RETIRED
    7 Posts 3 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bruor
      last edited by

      Running RC1 dated April 26th.

      I didn't have success with these steps and have tried with a New CA as well but am still having the same results.

      1.  Create a OVPN server instance and certificate from the new CA
      2.  Create a user certificate for my account using the same CA
      3.  Client export tab shows no available clients/users to export

      I've noticed some issues with weird characters in the CN fields in other posts.  CN for the user is something like flastname,  CN for the server cert is vpn.domain.com

      Any help is greatly appreciated as always!

      After some more digging it looks very familiar to the issue previously reported over here:  http://forum.pfsense.org/index.php/topic,29353.0.html

      1 Reply Last reply Reply Quote 0
      • GruensFroeschliG
        GruensFroeschli
        last edited by

        In what mode did you set up your server?

        We do what we must, because we can.

        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

        1 Reply Last reply Reply Quote 0
        • B
          bruor
          last edited by

          Remote Access (SSL/TLS) ….  I'm assuming I should be able to export a client installer that doesn't nag my users for a username/password when they want to connect.  Is my expectation wrong?    I just noticed the other thread showed SSL/TLS + user auth instead.

          1 Reply Last reply Reply Quote 0
          • GruensFroeschliG
            GruensFroeschli
            last edited by

            Yes you need to set it to user auth, otherwise it won't show up.

            We do what we must, because we can.

            Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

            1 Reply Last reply Reply Quote 0
            • jimpJ
              jimp Rebel Alliance Developer Netgate
              last edited by

              It should work with SSL/TLS (no auth), though I did make some changes to the exporter package the other day and could have inadvertently broken it. I thought I had tested each mode before I committed the changes though.

              Reinstall the OpenVPN Client Export package to be sure you're on the latest code and try it again. In the meantime I'll try some more tests.

              Normally as long as the CA matches, it will list them.

              Actually one thing you can check: Check your CA list and Certs list, make sure you don't have any duplicate entries. Perhaps you have two entries with the same name. I saw that happen once but wasn't able to reproduce it to track it down. If you do, edit the OpenVPN instance and re-select the right one, then the client certs may show up. If you have a duplicate CA, make sure you don't also have a duplicate cert, and change it also if needed.

              Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

              Need help fast? Netgate Global Support!

              Do not Chat/PM for help!

              1 Reply Last reply Reply Quote 0
              • GruensFroeschliG
                GruensFroeschli
                last edited by

                I've been using the exporter for quite a while, and i've always had the behaviour that it only shows up with auth.

                We do what we must, because we can.

                Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                1 Reply Last reply Reply Quote 0
                • jimpJ
                  jimp Rebel Alliance Developer Netgate
                  last edited by

                  Reinstall it again when the new version shows up on the package repo (2-3 minutes from now). It should export those as well.

                  Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                  Need help fast? Netgate Global Support!

                  Do not Chat/PM for help!

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.