Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • +4 person also asked this people also asked this
  • Locked Locked
  • Replies 62 replies
  • Answers 1 answer
  • Subscribers 44 subscribers
  • Views 210745 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can't get OpenVPN on Android to work

slikone27

Tried importing the cert a bunch of times and I keep getting an error while trying to connect:

OpenVPN core error : PolarSSL: error parsing cert certificate : X509 - The date tag value is invalid

Has anyone got the android openvpn app working?  Thanks!



This thread was automatically locked due to age.
Parents
  • 0

    Hi,

    I checked the issue on our UTM, because I've the same problem with some users.

    Since ASGv6 we update the configuration.

    All users ahead 2010 have the problem. All users after 2010 works fine.

    ./certdate.py ahead2010.pem
    === ahead2010.pem ===
    Certificate #1
      090431172508Z : correct UTCTime date length per RFC 5280
      350111172424+0000 : invalid date per RFC 5280 because not in Greenwich Mean Time (Zulu) format


    ./certdate.py after2010.pem
    === safter2010.pem ===
    Certificate #1
      131111113115Z : correct UTCTime date length per RFC 5280
      350711112424Z : correct UTCTime date length per RFC 5280



    I know from my support time at Astaro the we fix a certificate issue around 2010 (similar issue with ios vpn)

    Workaround for us

    recreate all user certificates ahead 2010 and reinstall the vpn profile

Reply
  • 0

    Hi,

    I checked the issue on our UTM, because I've the same problem with some users.

    Since ASGv6 we update the configuration.

    All users ahead 2010 have the problem. All users after 2010 works fine.

    ./certdate.py ahead2010.pem
    === ahead2010.pem ===
    Certificate #1
      090431172508Z : correct UTCTime date length per RFC 5280
      350111172424+0000 : invalid date per RFC 5280 because not in Greenwich Mean Time (Zulu) format


    ./certdate.py after2010.pem
    === safter2010.pem ===
    Certificate #1
      131111113115Z : correct UTCTime date length per RFC 5280
      350711112424Z : correct UTCTime date length per RFC 5280



    I know from my support time at Astaro the we fix a certificate issue around 2010 (similar issue with ios vpn)

    Workaround for us

    recreate all user certificates ahead 2010 and reinstall the vpn profile

Children
No Data