Looking for a workaround to import a OpenVPN Certificate (ee key too small)

Adleruser

Cadet
Joined
Dec 29, 2021
Messages
7
I am using TP-Link Omada for both my home and my parents' house and wanted to use the OpenVPN server I was already running to directly connect Truenas (Scale)
Unfortunately, when trying to import the OpenVPN Certificate, I get the following error:

Error: [EINVAL] certificate_create.privatekey: Private key does not match certificate: [('SSL routines', 'SSL_CTX_use_certificate', 'ee key too small')]

I suspect TP-Link's subpar OpenVPN integration uses a 1024-bit certificate, which is not recommended, yet it appears to be not only not recommended but actively blocked.
Has anyone else using TP-Link figured out a workaround, or more broadly: is there a way to "sideload" the Certificate around the validation checks?
 
Top