oldchap Hi all, Today I installed OpenVPN on two machines and tried to bring up a tunnel between them. The connection failed showing the error that the certificate could not verified because the CN could not be extracted from the cert. I deliberately left the CN field blank. The server does not have a DNS name and may be using changing IPs. Is there any way of forcing OpenVPN to skip the CN check or two override the error message? Any help is welcome. Thanks oldchap
janjust the short answer is "no", (regenerate your certs) however, if you're using OpenVPN 2.2+ (which you should be doing anyways ;-)) then you can overrule the /CN= check using the x509-username-field <FIELD> option
