Error: private key password verification failed

[Jonathan]

Hi,

I just set up a new OpenVPN server and having trouble connecting to it. See a log file attached to this

  $ openssl rsa -pubout < client.key  | md5

  ced1920e9e99be57146864d09e9e0684

  $ openssl x509 -noout -pubkey < client.crt | md5

  ced1920e9e99be57146864d09e9e0684

Generated entire credential pairs for server & clients on two different machines the error is still persistent.

Credentials are generated using the following command:

   ./easyrsa build-<client|server>-full <name> nopass

It would be grateful if anyone can help me out.

Thanks in advance.

[Tunnelblick developer]

This usually means there was a problem with the private key -- the key used to decrypt your security certificate. You might want to recreate your PKI using the instructions in Setting up your own Certificate Authority (CA) and generating certificates and keys for an OpenVPN server and multiple clients.

[Jonathan]

Problem solved. It looks like when I generate credentials on Mac, things don't work.

More information on this issue can be found in https://forums.openvpn.net/viewtopic.php?f=6&t=26092

[Tunnelblick developer]

It could be a problem in easy-rsa 3 if that's what you're using (instead of easy-rsa 2).

Or it could have something to do with Apple replacing OpenSSL with LibreSSL in High Sierra, if that's what you're using.

[Madara]

Hi

I am new to this! I'm getting this following error. Please help.

Wed Nov  8 12:25:43 2023 OpenSSL: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
Wed Nov  8 12:25:43 2023 OpenSSL: error:23077074:PKCS12 routines:PKCS12_pbe_crypt:pkcs12 cipherfinal error
Wed Nov  8 12:25:43 2023 OpenSSL: error:2306A075:PKCS12 routines:PKCS12_item_decrypt_d2i:pkcs12 pbe crypt error
Wed Nov  8 12:25:43 2023 OpenSSL: error:0907B00D:PEM routines:PEM_read_bio_PrivateKey:ASN1 lib
Wed Nov  8 12:25:43 2023 Cannot load private key file [[INLINE]]

[Tunnelblick developer]

Madara, please post the diagnostic info obtained by following the instructions at Read Before You Post.