Recently I got following error on arch linux while trying to connect openvpn.
Decoding PKCS12 failed. Probably wrong password or unsupported/legacy encryption
The solution is to re-encrypt the key file to non legacy algorithm. e.g.
openssl pkcs12 -in old_key.p12 -out new_key.p12 -aes256 -legacy