unable to get local issuer certificate

fxsession

Hello,

we use a bintec router with SSL-VPN. There exists a tool from the manufactor (packetalarm_sslvpn_client), based on openvpn which works well on Win7, but not on Win8 (unable to install). Thats the reason I want to setup the connection with openvpn.

By the way, with the mac software tunnelblick it wasn't a problem to setup this connection (same configuration files).

With the router configuration I got these files:
hosts
hmac.key (2048 bit OpenVPN static key)
config.ovpn
cert.p12

With packetalarm_sslvpn_client I got:
VERIFY OK: depth=1, /C=DE/ST=ST/L=Location/O=ORG/OU=ORG/CN=ORG/emailAddress=webmaster@org.de

But using openvpn breaks off with:
VERIFY ERROR: depth=0, error=unable to get local issuer certificate: C=DE, ST=ST, L=Location, O=ORG, OU=ORG, CN=ORG, emailAddress=org.de

Any ideas?

greetings
fx

maikcat

ca.crt?

Michael.

fxsession

Hello Michael,

thank you for the quick response, but what exactly do you mean with ca.crt, where can I get this file?

Included files are:
config.ovpn
cert.p12
hmac.key
hosts

I'm not an OPENVPN expert, but on mac I used these files only and it works perfectly.

I'm wondering that it is so difficult to configure with OPENVPN directly.

fxsession

by the way, on the router I have the possibility to download
User Certs
in following formats:

PEM (Certificate)
DER (Certificate)
PKCS#12 (Certificate + Private Key)
PEM (Private Key)

But what a pity, no CRT-file

janjust

an openvpn .crt file is an X509 PEM certficate
an openvpn .key file is an X509 PEM private key

does that help 🙂