OpenVPN Failing

Matt Caswell matt at openssl.org
Mon Feb 3 10:19:18 UTC 2020



On 01/02/2020 21:10, Leslie Rhorer wrote:
> Sat Feb  1 14:54:29 2020 us=650860 192.168.1.1:1194 VERIFY ERROR:
> depth=0, error=unsupported certificate purpose: C=US, ST=TX, L=San
> Antonio, O=Silicon Ventures, CN=RAID-Array, emailAddress=lesrhorer at att.net
> Sat Feb  1 14:54:29 2020 us=650899 192.168.1.1:1194 OpenSSL:
> error:1417C086:SSL routines:tls_process_client_certificate:certificate
> verify failed

The error occurs processing the client certificate with an unsupported
purpose.

>             X509v3 Extended Key Usage:
>                 TLS Web Server Authentication

It's a client certificate but the key usage is for server authentication!?


> extendedKeyUsage=serverAuth

Perhaps try clientAuth?

Matt


More information about the openssl-users mailing list