What's new

Problem with OpenVpn-server on RT-AC3200 Asus merlin

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

hytekk

New Around Here
I´m trying to setup my own openvpn-server and following this guide:
https://github.com/RMerl/asuswrt-merlin/wiki/Generating-OpenVPN-keys-using-Easy-RSA

Everything works fine setting up all the keys and certificates (have tried both on router and a ubuntu-computer, more or less the same result eg keys differ but everything else is the same).

The problem is when I´m do copy-paste my key/cert into the routers webgui - VPN - OpenVPN Servers - Advanced - Content modification of Keys & Certification -- Everything is ok but pasting in Server certificate. From what I understand I should copy all of server.crt beginning with:
"Certificate:

Data:

Version: 3 (0x2)

Serial Number: 1 (0x1)

Signature Algorithm: sha1WithRSAEncryption ......."

And ending with:
".....
FQuI3/NLaDg++vsT2HA9CWkX8Jb25EW2nMfjQ5LGv75cIT008nwSUXSGBHNxUwOI

5GDT

-----END CERTIFICATE-----"

The problem is that there is a limit of characters (3499) and I have is around 5500 characters . That means it stops pasting around Signature Algorithm.

I found this http://www.snbforums.com/threads/openvpn-server-certificate-no-longer-fits.13404/ which in someway almost explains my problem (probably?) but I can´t figure out how to solve it.

Anyone can guide me?
 
I think only need to paste the lines between (inclusive)
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
 
Does that mean this information should be saved or completely replaced?

Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-AC3200/emailAddress=me@myhost.mydomain
Validity
Not Before: Jan 1 00:04:21 2015 GMT
Not After : Dec 29 00:04:21 2024 GMT
Subject: C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-AC3200/emailAddress=me@myhost.mydomain
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:9e:d3:b6:10:f3:c5:6d:73:ef:3e:e5:c3:15:cd:
c0:0a:9b:1d:d2:01:28:6a:a9:cb:1a:57:25:cf:88: ......"

Or is similar information (but mine) stored using base64 DER between:
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
 
Or is similar information (but mine) stored using base64 DER between:
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----

The same information is available in the base64 code. It's just a text dump of it, for easier identification by the user who generated it.
 

Similar threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top