Comment 34 for bug 990765

I can confirm that the plugin network-manager-openvpn does not automagically import the certificates and thus rejects to save the settings.

Instead, you need to pull at least the ca into a .crt file as described in #33 and select it separately e.g. to use login / password authentication.