Cannot import X509

[scegg]

Hi all.

In my office A, there is a VPN server created by Zeroshell. I created several accounts and downloaded CA and user key files. These files work great with OpenVPN.

In my office B, which use ZeroShell like a internet router, I want to use ZeroShell instead of OpenVPN to connect to office A. So I want to create a VPN link as client to office A.

I think I need to import CA and one working key file to ZeroShell @ office B. But unlucky, I get an error while importing:
ERROR: the private key is not related to the certificate
I’m sure that the files are correct coz I can use them in OpenVPN without any trouble.

How can I do that? Thank you.

[scegg]

No body can fix this?

reproduction step:
1 Create a server with Zeroshell (A);
2 Create a user UserA in A;
3 Download CA file of A and key file of UserA in PEM format;
4 Create a server with Zeroshell B;
5 Click Setup on the left panel of B, click Network tab on the top;
6 Press New VPN button;
7 Press Imported button below at the new window;
8 Choose File (CA and Key);
9 Press Import.
You will get the error:
ERROR: the private key is not related to the certificate

Yes, the files created cannot be recognized or verified by yourself.

[ppalias]

Try this… go to Security -> X.509 CA
On the setup tab there is a section “Importing CA from external source”. Select the Private Key and Certificate of A and import them.
Let me know if it helps.

[scegg]

No….
It warns me that if I process this, all key files will be lost.
I just want to add a new user for connect to a VPN server, not delete all my keys.

[ppalias]

If you want this user to connect to Zeroshell B you have to issue a KEY file from ZS-B not from A. So you’ll have to recreate this user on ZS-B and export his credentials. Otherwise you’ll have to erase all your keys from ZS-B and import the CA of ZS-A.

[scegg]

This key file and this CA file are downloaded from ZS-B. And files are OK coz I can use them in OpenVPN for Windows.
I just want a way to let ZS-A works instead of OpenVPN @ Windows Client.

[ppalias]

You have to go to Network -> VPN -> LAN to LAN -> New VPN
On the new window that pops up you can import the keys for a Zeroshell-to-Zeroshell OpenVPN.

[Author]

Posts