Bug 11171 - Internal Server Error creating "Download insecure Client package (zip)"
Summary: Internal Server Error creating "Download insecure Client package (zip)"
Status: CLOSED INSUFFICIENT_DATA
Alias: None
Product: IPFire
Classification: Unclassified
Component: openvpn (show other bugs)
Version: 2
Hardware: all All
: - Unknown - - Unknown -
Assignee: Alexander Marx
QA Contact:
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-08-28 17:47 UTC by Roberto Peña
Modified: 2018-06-18 15:20 UTC (History)
3 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Roberto Peña 2016-08-28 17:47:38 UTC
Once created the certificate OpenVPN, the link does not appear to download "Download insecure Client package (zip)". You have to edit the certificate without changing anything, after pressing the "Save" button appears. If you try to download it, it gives an error "Internal Server Error".

http://forum.ipfire.org/viewtopic.php?f=50&t=17011
Comment 1 Erik Kapfer 2016-08-28 18:31:01 UTC
Hi all,
i can confirm this. If a connection is setup with a PKCS#12 password it shows after creation in the "Connection Status and -Control" section only the "Download Client Package (zip)" icon which is correct. But if the connection will be modified (over the 'Edit' button) the second icon for "Download Insecure Client Package (zip)" appears after editing (or by only pressing the save button) too.
By downloading the insecure package (which should be in real PKCS#12 format encrypted) it will end in a "internal server error" with the following output in /var/log/httpd/error_log :

[error] [client 192.168.75.2] Mac verify error: invalid password?, referer: https://192.168.1.8:444/cgi-bin/ovpnmain.cgi
[error] [client 192.168.75.2] openssl error: 256 at /srv/web/ipfire/cgi-bin/ovpnmain.cgi line 2292., referer: https://192.168.1.8:444/cgi-bin/ovpnmain.cgi
[error] [client 192.168.75.2] Premature end of script headers: ovpnmain.cgi, referer: https://192.168.1.8:444/cgi-bin/ovpnmain.cgi

Greetings,

Erik
Comment 2 Massaguana 2017-06-17 09:09:33 UTC
looks like this Bug: https://bugzilla.ipfire.org/show_bug.cgi?id=11048

@Roberto: are you are an Mac User?
Comment 3 Roberto Peña 2017-06-17 09:34:46 UTC
No, I'm a Microsoft User. For Microsoft it works perfect. The problem occurs when trying to generate the insecure Client package to configure a VPN access for both an Android device and IOS. In the forum, someone commented that for these devices it was better to import the insecure Certificate.

I hope I've been helpful.
Comment 4 Michael Tremer 2018-06-18 15:20:55 UTC
Not sure what we can do about this...