OpenVPN config export what is login??

[electrofreak]

I'm not an expert on OpenVPN, so I feel like something isn't right with what I've setup here.

I used the wizard to setup the server, and created 2 users. One is a user for myself, the other is a user for an external server I want to create a persistent tunnel with.

I started testing with my user account on my laptop. But then ran into the same problem on this server when attempting to do the same thing:

[myuser]@[myserver]:/etc/openvpn$ sudo openvpn /etc/openvpn/pfsense-udp-1194/pfsense-udp-1194.ovpn
Sun Jan  1 22:38:15 2012 OpenVPN 2.1.0 x86_64-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Jul 20 2010
Enter Auth Username:******* 
Enter Auth Password:
Sun Jan  1 22:38:21 2012 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Sun Jan  1 22:38:21 2012 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page).
Sun Jan  1 22:38:21 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun Jan  1 22:38:21 2012 Error opening file pfsense-udp-1194.p12 (OpenSSL)
Sun Jan  1 22:38:21 2012 Exiting

I cannot figure out the correct username and password to open this .p12 file. I tried the login for the user as created on the local database on the pfsense router, I've tried other accounts, I've tried other possible variations that I considered possibilities… nothing works. I've also tried blank username, blank passwords, etc... but that went nowhere, too.

I FINALLY got it working on my laptop, but I had to export a viscosity configuration, and install that (which is only a 30-day trial). I guess that export was configured with no password on the .p12 file.

Help! Maybe my configuration is too locked down, but maybe it's just standard. I don't know a whole lot about OpenVPN, admittedly.

[Nachtfalke]

In general there is no password for the .p12 file as long as you did not enter one.
Did you use the "Client Export Utility" to export the client configuration + cert ?

If yes, there is an option which is by default unchecked:
"Use a password to protect the pkcs12 file contents or key in Viscosity bundle."

I have to mention that I do not use the wizard to create an OpenVPN server but there should not be any difference.

[electrofreak]

Thanks for the reply.

Yes, I used the exporter, and I had that option deselected (as was the default). Something must be wrong with the exporter then. Hmmm

[Nachtfalke]

The export utility is working fine. I tried it today on a VM with pfsense 2.0.1 amd64 - but without the wizard.
Delete the OpenVPN server and try again with the wizard or without the wizard.