Bug 11171

Summary: Internal Server Error creating "Download insecure Client package (zip)"
Product: IPFire Reporter: Roberto Peña <contacto>
Component: openvpnAssignee: Alexander Marx <alexander.marx>
Status: CLOSED INSUFFICIENT_DATA QA Contact:
Severity: - Unknown -    
Priority: - Unknown - CC: llapakf, michael.tremer, ummeegge
Version: 2   
Hardware: all   
OS: All   

Description Roberto Peña 2016-08-28 17:47:38 UTC
Once created the certificate OpenVPN, the link does not appear to download "Download insecure Client package (zip)". You have to edit the certificate without changing anything, after pressing the "Save" button appears. If you try to download it, it gives an error "Internal Server Error".

http://forum.ipfire.org/viewtopic.php?f=50&t=17011
Comment 1 Erik Kapfer 2016-08-28 18:31:01 UTC
Hi all,
i can confirm this. If a connection is setup with a PKCS#12 password it shows after creation in the "Connection Status and -Control" section only the "Download Client Package (zip)" icon which is correct. But if the connection will be modified (over the 'Edit' button) the second icon for "Download Insecure Client Package (zip)" appears after editing (or by only pressing the save button) too.
By downloading the insecure package (which should be in real PKCS#12 format encrypted) it will end in a "internal server error" with the following output in /var/log/httpd/error_log :

[error] [client 192.168.75.2] Mac verify error: invalid password?, referer: https://192.168.1.8:444/cgi-bin/ovpnmain.cgi
[error] [client 192.168.75.2] openssl error: 256 at /srv/web/ipfire/cgi-bin/ovpnmain.cgi line 2292., referer: https://192.168.1.8:444/cgi-bin/ovpnmain.cgi
[error] [client 192.168.75.2] Premature end of script headers: ovpnmain.cgi, referer: https://192.168.1.8:444/cgi-bin/ovpnmain.cgi

Greetings,

Erik
Comment 2 Massaguana 2017-06-17 09:09:33 UTC
looks like this Bug: https://bugzilla.ipfire.org/show_bug.cgi?id=11048

@Roberto: are you are an Mac User?
Comment 3 Roberto Peña 2017-06-17 09:34:46 UTC
No, I'm a Microsoft User. For Microsoft it works perfect. The problem occurs when trying to generate the insecure Client package to configure a VPN access for both an Android device and IOS. In the forum, someone commented that for these devices it was better to import the insecure Certificate.

I hope I've been helpful.
Comment 4 Michael Tremer 2018-06-18 15:20:55 UTC
Not sure what we can do about this...