ANSWERED New CA and Certificate - No access to config generator

[jowlo 0]

Hi everyone!

I have a system up and running for many many years now using the same config file.  I connect to europe.vpn.airdns.org. I suppose my key will still work afterwards anyways.

My tunnel stopped working a few days ago. I saw all the other topics on here, however I do not have access to the config generator - long story. 

I guess i could just update the CA if i could get my hands on that. But iirc the certificate is my client certificate which expired a few days ago. Is there any way to update this?
.
I tried downloading the CA directly from the servers with

openssl s_client -showcerts -connect europe.vpn.airdns.org:443

But that doesn't seem to be getting a certificate chain from them. I would be happy if someone can point me in the right direction.
  Edited ... by jowlo

[Staff 10014]

@jowlo

Hello!

You must enter the Configuration Generator while you are logged in to the web site with an account having a valid plan. If you try to enter with an account that does not have access to AirVPN, the CG can't generate anything because the account does not have an OpenVPN certificate or a WireGuard key etc. To clarify, when you try to enter the CG from an account which does not have any valid certificate and/or key, you get a descriptive error message.

"jowlo" has never had a valid plan to enter AirVPN, probably you have a different account, please check.

Kind regards
 

[jowlo 0]

Hi!

Thanks for the quick answer. I know, but this is a device managed by another account. I do not have access to that account to regenerate the configuration for this device. 

My question was whether there is another way of extending the lifetime of the certificate and getting the new CA without the use of the Configuration Generator. But it appears not, thank you anyways...

[Staff 10014]

14 minutes ago, jowlo said:

Hi!

Thanks for the quick answer. I know, but this is a device managed by another account. I do not have access to that account to regenerate the configuration for this device. 

My question was whether there is another way of extending the lifetime of the certificate and getting the new CA without the use of the Configuration Generator. But it appears not, thank you anyways...

Hello!

Well, very strange case. BTW, ca.crt is just a public certificate and is always the same, so no, the Configuration Generator is not strictly needed, once any account has the ca.crt, it can be sent to any other account. The client certificate and key, on the contrary, are secret and non-sharable files.

Kind regards