Options error: No Closing Quotation

[mattenz]

So I've created an APC file with the script which imports into Sophos UTM 9.3 ok but in the UTM's log I can see when it's trying to connect that it's getting this error:
Options error: No closing quotation (") in /etc/openvpn/client/REF_SslCliAzure2/config:9

When I open that file, it is indeed missing a quote:
tls-remote "tls-auth /etc/ta_LuWlMsqd.key

Is this an issue with the script or is it something I've entered wrong along the way?

[neb382]

I have exactly the same error. But i don´t think it is a missing quote, when changing it directly in the config file on the sophos the log is telling me that tls-remote is unsupported.
So i removed tls-remote and just add the line
tls-auth keyfile without quotes and manually restarted the openvon on shell.
unfortunately sophos removed the client directory on each restart and build the config from database which caused the changes rolled back. Therefore it would be great anyone could fix it in the script.

[RustyDust]

The problem most likely is in the files supplied to ovpn-to-apc.sh. As you can see from the source code, there's a branch where the script decides whether to use tls-auth or tls-remote in the resulting config generated for the Sophos UTM. So without the input files used it's hard to fix the script or the config provided to it.

[neb382]

what i have received as ovpn file is the following:
client
dev tun
remote remote.server.com 1194 udp
remote remote.server.com 443 tcp
remote-cert-tls server
comp-lzo no
auth SHA1
nobind
verb 3
sndbuf 0
rcvbuf 0
socket-flags TCP_NODELAY

• serveral certificates in that file.

the script is throughing an error at line 125
./ovpn-to-apc.sh: Zeile 125: $'\302\240': Kommando nicht gefunden.
Cleaning up tmp dir : ovpn-to-apc_RsT6zyea

Any idea?

[RustyDust]

Not really, since the command on line 125 is a simple 'echo'.

[gregor-hh]

Hi,
I have the same issue with the "No closing quotation":

Options error: No closing quotation (") in /etc/openvpn/client/REF_SslCliPp/config:9

If I VI the config it shows:

tls-remote "tls-auth /etc/ta_qrX3Iddi.key

Is this a problem with the *.sh script or the *.ovpn file? (it's a ovpn file from a VPN Provider. - Perfect-Privacy)
I also edited the config file. but its dynamicly new created, every time....

Can someone help ? RustyDust? If i provide you the *.ovpn file an logins?

Many Thanks
Gregor

UPDATE

It works, yes!!!! :-) the config /etc/openvpn/client/REF_****** is dynamicly created from the uploaded *.apc + /etc/openvpn/client/config-default .

So I edited the config-default. -> tls-auth line was correct then
After it I had to comment off the echo for the "key-direction 1" from the sh script and put this value also manually in the config-default. (Quotes Error again)

After that the Connection to my VPN Provider was established YES 👍

That was not all because the UTM then has tunneled ALL over the Connection, but with a bit modify in the config:
route-nopull
route-noexec
and some route adds, it works

Now I have a safe VPN tunnel to my Perfect Privacy Provider and can connect to the SOCKS and Squid Proxy with the Internal Server IP.

And with Parent Proxy Configuration (Web filter), websites which I want to, automaticly use the "safe way" ;)

Many THx to RustDust for the Converter .

If someone need help, ask me .

PS: Sry about my bad english ;)

[goodguyx]

Hallo Gregor, ich spare mir mal mein Englisch und hoffe das du mir bei diesem Problem weiterhelfen kannst... ich wäre dir wirklich sehr dankbar.

Der PP Support scheint sich meiner Sache nicht richtig anzunehmen..
https://board.perfect-privacy.com/threads/vpn-keine-verbindung-zustande-win.1962/#post-17833

[gregor-hh]

achsooo sry, überlesen, auch die Fehlermeldung die ich hatte. Ich benutze allerdings ne sophos firewall. du könntest versuchen den wert aus der ovpn zu nehmen und als parameter zu übergeben oder in eine gloabale cfg einzutragen.

[truetimes]

Could you provide the specific changes that need to be made to the script and to the default-config on the UTM, because I also get the config file is corrupted.

Thanks!