OpenVPN Failing
Matt Caswell
matt at openssl.org
Mon Feb 3 10:19:18 UTC 2020
On 01/02/2020 21:10, Leslie Rhorer wrote:
> Sat Feb 1 14:54:29 2020 us=650860 192.168.1.1:1194 VERIFY ERROR:
> depth=0, error=unsupported certificate purpose: C=US, ST=TX, L=San
> Antonio, O=Silicon Ventures, CN=RAID-Array, emailAddress=lesrhorer at att.net
> Sat Feb 1 14:54:29 2020 us=650899 192.168.1.1:1194 OpenSSL:
> error:1417C086:SSL routines:tls_process_client_certificate:certificate
> verify failed
The error occurs processing the client certificate with an unsupported
purpose.
> X509v3 Extended Key Usage:
> TLS Web Server Authentication
It's a client certificate but the key usage is for server authentication!?
> extendedKeyUsage=serverAuth
Perhaps try clientAuth?
Matt
More information about the openssl-users
mailing list