OpenVPN Support Forum

Posted: **Tue Jun 01, 2021 5:14 pm**

Hi, there is an error when i configure the certificates for the OpenVPN Connect app in a Samsung tablet. the error says "You are using insecure hash algorithm in CA signature. Please regenerate CA with other hash algorithm".

When I run " openssl x506 -text -noout -in xxxx.crt | grep "Signature Algorithm" " in the CA.crt certificate it says it uses the SHA256withRSA but when i used it in the client certificate it says MD5withRSA.

How could I change this setting for the client algorithm is also the SHA256?

Posted: **Tue Jun 01, 2021 5:41 pm**

You need to use Easy-RSA to generate a new PKI.

https://github.com/OpenVPN/easy-rsa

Posted: **Sat Oct 21, 2023 12:14 pm**

I get this same error on my iphone, but on my Windows PC, I can still connect fine. Why would I only get this error on the iphone if both are using the same CA signature?

OpenVPN Support Forum

Change Client certificate hash authentication algorithm

Change Client certificate hash authentication algorithm

Re: Change Client certificate hash authentication algorithm

Re: Change Client certificate hash authentication algorithm