-
Notifications
You must be signed in to change notification settings - Fork 3.3k
Private key password verification failed with version 2.7.0 #993
Description
Describe the bug
I have trouble starting openvpn-server or using openvpn-client with an encrypted private key after the upgrade to 2.7.0
After I upgraded openvpn from version 2.6.19-bookworm0 to 2.7.0-bookworm1 on debian or openvpn-2.6.19-1 to openvpn-2.7.0-1 on arch linux openvpn won't start with the error:
"Error: private key password verification failed" after I copy-pasted the correct password as usual.
Downgrading back to 2.6.19 fixed the bug for me, with the exact same password.
I also checked with openssl rsa -noout -text -in with the same password and it worked.
To Reproduce
Use an encrypted private key with the openssl version 2.7.0.
My private keys asn1 parameters look like this
6:d=2 hl=2 l= 9 prim: OBJECT :PBES2
17:d=2 hl=2 l= 65 cons: SEQUENCE
19:d=3 hl=2 l= 41 cons: SEQUENCE
21:d=4 hl=2 l= 9 prim: OBJECT :PBKDF2
32:d=4 hl=2 l= 28 cons: SEQUENCE
44:d=5 hl=2 l= 2 prim: INTEGER :0800
48:d=5 hl=2 l= 12 cons: SEQUENCE
50:d=6 hl=2 l= 8 prim: OBJECT :hmacWithSHA256
60:d=6 hl=2 l= 0 prim: NULL
62:d=3 hl=2 l= 20 cons: SEQUENCE
64:d=4 hl=2 l= 8 prim: OBJECT :des-ede3-cbc
Expected behavior
It should decrypt the key and start just like it does after a downgrade / did before.
Version information (please complete the following information):
- OS: Arch Linux and Debian 12
- OpenVPN version: openvpn-2.7.0-1 and 2.7.0-bookworm1