`Environment:
M2 Mac, Sonoma 14.5
VM: UTM/Kali Linux
When I download the OpenVPN configuration file from TryHackMe and execute the file, I get the following errors:
2024-08-12 22:27:27 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set. 2024-08-12 22:27:27 WARNING: Compression for sending and receiving enabled. Compression has been used in the past to break encryption. Allowing compression allows attacks that break encryption. Using "--allow-compression yes" is strongly discouraged for common usage. See --compress in the manual page for more information 2024-08-12 22:27:27 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers. 2024-08-12 22:27:27 Note: '--allow-compression' is not set to 'no', disabling data channel offload. 2024-08-12 22:27:27 OpenVPN 2.6.12 aarch64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] 2024-08-12 22:27:27 library versions: OpenSSL 3.2.2 4 Jun 2024, LZO 2.10 2024-08-12 22:27:27 DCO version: N/A 2024-08-12 22:27:27 OpenSSL: error:0480006C:PEM routines::no start line:Expecting: CERTIFICATE 2024-08-12 22:27:27 OpenSSL: error:0A080009:SSL routines::PEM lib: 2024-08-12 22:27:27 Cannot load inline certificate file 2024-08-12 22:27:27 Exiting due to fatal error
Here is the content of the .ovpn file:
client
dev tun
proto udp
sndbuf 0
rcvbuf 0
remote 18.202.129.195 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA512
comp-lzo
pull
key-direction 1
verb 3
reneg-sec 0
data-ciphers AES-256-CBC
<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>
<cert>
</cert>
<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
-----END OpenVPN Static key V1-----
</tls-auth>
The section is empty. Is this correct? Even if I regenerate the file on THM, it remains empty. Is there a certificate stored somewhere else?
sudo apt update
sudo apt upgrade
sudo apt install openvpn
Regenerated .ovpn file on THM `
Yasuda Rikuto is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.