Every time I setup an VPN using openvpn, I mess something in the certificates or keys. Now I use xca for managing my keys and my life is a little bit easier.
But once the certificates and keys are generated, I usually deploy them something don’t work. The openvnp log contains something like :
VERIFY ERROR: depth=X, error=self signed certificate: ...
openssl
offer a command for checking certificate chains before deployment:
openssl verify -CAfile ca.crt server.crt
If the response is not “client.crt: OK”, there is no need trying to deploy your certificates.
~~~
Question, remark, bug? Don't hesitate to contact me or report a bug.