Communities

Writing
Writing
Codidact Meta
Codidact Meta
The Great Outdoors
The Great Outdoors
Photography & Video
Photography & Video
Scientific Speculation
Scientific Speculation
Cooking
Cooking
Electrical Engineering
Electrical Engineering
Judaism
Judaism
Languages & Linguistics
Languages & Linguistics
Software Development
Software Development
Mathematics
Mathematics
Christianity
Christianity
Code Golf
Code Golf
Music
Music
Physics
Physics
Linux Systems
Linux Systems
Power Users
Power Users
Tabletop RPGs
Tabletop RPGs
Community Proposals
Community Proposals
tag:snake search within a tag
answers:0 unanswered questions
user:xxxx search by author id
score:0.5 posts with 0.5+ score
"snake oil" exact phrase
votes:4 posts with 4+ votes
created:<1w created < 1 week ago
post_type:xxxx type of post
Search help
Notifications
Mark all as read See all your notifications »
Q&A

Comments on NetworkManager can't open certificate file when trying to connect to VPN

Post

NetworkManager can't open certificate file when trying to connect to VPN

+3
−0

I want to connect to my university network via OpenVPN under Fedora GNOME. I imported the openvpn configuration provided by the university in the Network Manager GUI and specified the user certificate (.crt.pem) and user key (.key.pem).

When I want to connect, it says there was an error. Using journalctl -xu NetworkManager I can see the following (I replaced the home dir path with "/certs"):

WARNING: file '/certs/Network_Certificate_OPVPN.key.pem' is group or others accessible
OpenVPN 2.6.9 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
library versions: OpenSSL 3.1.1 30 May 2023, LZO 2.10
DCO version: N/A
NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
OpenSSL: error:8000000D:system library::Permission denied:calling fopen(/certs/Network_Certificate_OPVPN.crt.pem, r)
OpenSSL: error:10080002:BIO routines::system lib:
OpenSSL: error:0A080002:SSL routines::system lib:
Cannot load certificate file /certs/Network_Certificate_OPVPN.crt.pem
Exiting due to fatal error

So there seems to be a problem with opening the cert file? I also manually chmod'ed read (and execution) access, but that didn't change anything. Connecting via cli with sudo gives the same error.

It may be relevant that I had to extract the cert and key with the -legacy option from a .p12 file, but I'm not sure.

History
Why does this post require moderator attention?
You might want to add some details to your flag.
Why should this post be closed?

1 comment thread

Please add the permissions to the post (1 comment)
Please add the permissions to the post
Quasímodo‭ wrote 2 months ago

What is the output of ls -la /certs/Network_Certificate_OPVPN.crt.pem and groups?