Topic: OpenVPN on Koozali 10 - "Password entry required"

[joost]

Hi,

I installed openvpn-bridge.

What am I doing wrong if I keep getting

"Password entry required for 'Enter Private Key Password:' (PID 4909).
Please enter password with the systemd-tty-ask-password-agent tool!"

when I login a terminal session?

Thanks,

[gieres]

Hi,
Perhaps have you forget to set password user in configuration panel ; by example in :
*In ubuntu go to '''Network Manager > VPN Connections > Configure VPN'''. Click '''import''' then in the explorer navigate to the openvpn folder in the home directory and select the .ovpn file created previously. This should automatically load all settings into network manager.
*Add username and password of client, then you have to give the path of the '''user.p12''' key of your user and set the  Private key password (the password set during the certificate creation in phpky).

[ReetP]

Or create the client certificate without a password?

[joost]

I guess it was the deamon, because I got this message on Koozali server and I got rid of the message when I entered the CA-password. I'm still wondering is this normal? I cannot remember that in the passed with a former installation of a server that I got this same problem. So my question is, did I do something wrong? Thanks

[Jean-Philippe Pialasse]

I guess it was the deamon, because I got this message on Koozali server and I got rid of the message when I entered the CA-password. I'm still wondering is this normal? I cannot remember that in the passed with a former installation of a server that I got this same problem. So my question is, did I do something wrong? Thanks

probably did not read the manual : https://wiki.koozali.org/OpenVPN_Bridge#Using_PHPki_to_manage_the_certificates

Password: This field must be blank. Remember that OpenVPN daemon starts without human intervention when the server boots, so it need to have access to the certificate key without being prompted for a password.

[joost]

If I try to leave the password field  empty when creating the CA I get the following error:

ERROR(S) IN FORM:
Missing Certificate Password
Missing Certificate Password Verification "Again"

Can I bypass this?

[ReetP]

You need to read more.

https://wiki.koozali.org/PHPki

You always add a password for creating your CA certificate when you set up PKPki.

You do not need a password when creating the user certificate for openvpn.

[Jean-Philippe Pialasse]

you need to select the type vpn client or vpn. server for the form to allow you mot to fill the password.