Re: openvpn: embedding pkcs12 into ovpn config

[Paul Smith <paul mad-scientist net>]

On Fri, 2017-03-17 at 21:28 -0400, Paul Smith wrote:
> Second, I really want to use an embedded certificate format in the ovpn
> for the pkcs12 file rather than shipping two separate files.
> [...] when I attempt to connect it fails.

I tried this same ovpn file with embedded pkcs12 cert with Viscosity on
my MacOS system and it worked just fine.  Also, I discovered that the
my-pkcs12.pem file is in fact just the un-decoded base64 content: if I
convert that back from base64 into its binary format and put that in the
file instead, it all works in NetworkManager as well.

So, it seems like NM openvpn is just missing a step here when it
extracts the embedded cert into a file.

I've filed https://bugzilla.gnome.org/show_bug.cgi?id=780251 about this.

Cheers!