OpenVPN -Cert issues

Ask Fedora
,
1

Hi I have tried on both Fedora 30 and 29 to get connected to my open vpn without success. not sure why im batteling with this. Works on windows and Manjaro.
I tried to load the file in both the Gui and the terminal
Log

OpenSSL: error:0200100D:system library:fopen:Permission denied OpenSSL: error:0200100D:system library:fopen:Permission denied
OpenSSL: error:0200100D:system library:fopen:Permission denied
OpenSSL: error:0200100D:system library:fopen:Permission denied

any assistance would be great
tks

1 Like
2

Hello @hayt and welcome to the community. Take some time to read #start-here category if you haven’t already done it.

I don’t remember, sorry, but some time ago I managed to configure openvpn client with certificates, and the issue I encountered was that I placed the certificates in an arbitrary directory of my choice and SELinux wasn’t happy.
So you have to look what are the suitable directories under you home where to place openvpn client stuff. Maybe ~/.cert?

3

Hi @alciregi
Okay I have coppied all the files to a folder within root\tmp\
this works yay! … and then I reboot. and then the files are no longer there.

I then created a folder root\var\log\openvpn
dumpetd the files in there. and… no joy
I tried dumping the files into the home\openvpn\ - no joy
home\public\ - no joy
I made a VPN folder directly in root. still no joy.
I can only get it working by copying the files into the tmp directory.
Any ideas on how to fix this

4

Try to create a directory named .cert in your home directory, and put the stuff there.

5

Thank you for your suggestion.
I tried this in both the root and the home.
No success, unfourtunatly :frowning:

6

Wait.
What do you mean with “home”?
Can you write here the commands you have performed?

7

Put the files in the ~/.cert folder then run the following command:

restorecon -R -v ~/.cert

1 Like
8

Some explaination about this command is found in the answer to this archived Ask Fedora post.

2 Likes
9

Thanks so much that did the trick (restorecon -R -v ~/.cert)
Btw
I had a .cert folder in the root as well home.

thanks so much