Skip to content

Private key password verification failed with version 2.7.0 #993

@EmnichtdaYT

Description

@EmnichtdaYT

Describe the bug
I have trouble starting openvpn-server or using openvpn-client with an encrypted private key after the upgrade to 2.7.0
After I upgraded openvpn from version 2.6.19-bookworm0 to 2.7.0-bookworm1 on debian or openvpn-2.6.19-1 to openvpn-2.7.0-1 on arch linux openvpn won't start with the error:
"Error: private key password verification failed" after I copy-pasted the correct password as usual.
Downgrading back to 2.6.19 fixed the bug for me, with the exact same password.
I also checked with openssl rsa -noout -text -in with the same password and it worked.

To Reproduce
Use an encrypted private key with the openssl version 2.7.0.
My private keys asn1 parameters look like this

    6:d=2  hl=2 l=   9 prim: OBJECT            :PBES2
   17:d=2  hl=2 l=  65 cons: SEQUENCE          
   19:d=3  hl=2 l=  41 cons: SEQUENCE          
   21:d=4  hl=2 l=   9 prim: OBJECT            :PBKDF2
   32:d=4  hl=2 l=  28 cons: SEQUENCE          
   44:d=5  hl=2 l=   2 prim: INTEGER           :0800
   48:d=5  hl=2 l=  12 cons: SEQUENCE          
   50:d=6  hl=2 l=   8 prim: OBJECT            :hmacWithSHA256
   60:d=6  hl=2 l=   0 prim: NULL              
   62:d=3  hl=2 l=  20 cons: SEQUENCE          
   64:d=4  hl=2 l=   8 prim: OBJECT            :des-ede3-cbc

Expected behavior
It should decrypt the key and start just like it does after a downgrade / did before.

Version information (please complete the following information):

  • OS: Arch Linux and Debian 12
  • OpenVPN version: openvpn-2.7.0-1 and 2.7.0-bookworm1

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions