Ask a sert key method authentication question.

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
dna2073
Posts: 3
Joined: Thu Sep 21, 2023 12:18 am

Ask a sert key method authentication question.

Post by dna2073 » Thu Oct 19, 2023 4:16 am

When connecting to openvpn, to access without id, pw, oppn annotates #auth-user-pass

encryption and network Server Certificate SEttings - Export - SAVE AS X509 Certificafe

I received *.cer and *key, edited it, put in an ovpn text, and connected it

It says authentication failure and I can't connect. Where should I check?
-----------------------------------------------------------------------------------------

<add line>
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# Client certificate and key.
#
# A pair of client certificate and private key is required in case you want to
# use the certificate authentication.
#
# To enable it, uncomment the lines below.
# Paste your certificate in the <cert> block and the key in the <key> one.

<cert>
-----BEGIN CERTIFICATE-----
MIID+jCCAuKgAwIBAgIBADANBgkqhkiG9w0BAQsFADB8MSMwIQYDVQQDDBp2cG44
Njk5ODkwNjEuc29mdGV0aGVyLm5ldDEjMCEGA1UECgwadnBuODY5OTg5MDYxLnNv
ZnRldGhlci5uZXQxIzAhBgNVBAsMGnZwbjg2OTk4OTA2MS5zb2Z0ZXRoZXIubmV0
MQswCQYDVQQGEwJVUzAeFw0yMzEwMTkwNDAwNDNaFw0zNzEyMzEwNDAwNDNaMHwx
IzAhBgNVBAMMGnZwbjg2OTk4OTA2MS5zb2Z0ZXRoZXIubmV0MSMwIQYDVQQKDBp2
cG44Njk5ODkwNjEuc29mdGV0aGVyLm5ldDEjMCEGA1UECwwadnBuODY5OTg5MDYx
LnNvZnRldGhlci5uZXQxCzAJBgNVBAYTAlVTMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAu0sQkt30ro0JMML3Bqh1Rp+05PyIxsRTpJGmNgQbzbkFKzWi
Q7OlzAedDJaZZ0td+phfIJVylJHIxTh4CHZsRrChUuWula9J8KEiWXC5ROxLk3df
gMfh6NL2CrSVFG8jNcPNpnh5CZB921jAmIbq0xmbGSQjtYFbxNZC/4R4HMfMPNBe
cYkz/JXYr8sdkVlLi/0DO9FKWl4MQoOdCKTgErGY96Pf/MSHiUS4oUs4++GXSGPk
o8b3LHMib5ZRyWPI4YATGE0CmyZg3Vmqcb2RFpwivKx1nE+AoBnSlnHOFlGUc2oJ
DIg2kaXh89mi8pxAezOpQuMHAmAayWFnL6CocQIDAQABo4GGMIGDMA8GA1UdEwEB
/wQFMAMBAf8wCwYDVR0PBAQDAgH2MGMGA1UdJQRcMFoGCCsGAQUFBwMBBggrBgEF
BQcDAgYIKwYBBQUHAwMGCCsGAQUFBwMEBggrBgEFBQcDBQYIKwYBBQUHAwYGCCsG
AQUFBwMHBggrBgEFBQcDCAYIKwYBBQUHAwkwDQYJKoZIhvcNAQELBQADggEBADLb
OBNRZmrokzCxzgZjzsT3Ol9NR1vjPqGmL+t4wROykO/93Mhe5yMMAtmY71JRBqS5
0IMgaoJVhw/VNQur8+gD2bjRR3tIPWFxQAmCneB4x0FgYEO/Dj3/N0Ehs9FGKgW/
ULJfGmIX1UYybYhUpSirMqkzqA22ss1onA61pjbFyG1iqTbNGhjJja+oc80aemNw
pyQ+MFiiysvKjGFnah9OMWG84QotVYMfzwFndFLX5ErS6Fev0gE6KY4ZnW4JuSyu
7bfs+F8rCPXHKbhyCfsSe0gNJxEbYJI2+J9YOfTwUPFNFHC40VILOjOBkyDTuwQD
9OajSRx+sZ5iJSPzkDM=
-----END CERTIFICATE-----
</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

shakibamoshiri
Posts: 284
Joined: Wed Dec 28, 2022 9:10 pm

Re: Ask a sert key method authentication question.

Post by shakibamoshiri » Thu Oct 19, 2023 6:59 am

Did you assigned the "cert" for that username you wanted to connect with ?

When you generate a key pair, you save both in file.ovpn for client and also set the cert for that user.
If done correctly, it connects

NOTE
On SoftEther Developer version this feature works not on Stable version

dna2073
Posts: 3
Joined: Thu Sep 21, 2023 12:18 am

Re: Ask a sert key method authentication question.

Post by dna2073 » Thu Oct 19, 2023 8:46 am

https://www.vpngate.net/common/openvpn_ ... p_443.ovpn

Sample of softether vpngate. ovpn file

I want to access without id and pw like this.

this is not an assignment to an ID/PW

shakibamoshiri
Posts: 284
Joined: Wed Dec 28, 2022 9:10 pm

Re: Ask a sert key method authentication question.

Post by shakibamoshiri » Thu Oct 19, 2023 2:45 pm

dna2073 wrote:
Thu Oct 19, 2023 8:46 am
https://www.vpngate.net/common/openvpn_ ... p_443.ovpn

Sample of softether vpngate. ovpn file

I want to access without id and pw like this.

this is not an assignment to an ID/PW
https://www.vpnusers.com/viewtopic.php?f=7&t=68575

Post Reply