I've been trying to get openvpn-2.3.2-1.x86_64 working on a centos 6.4 64 bit server without success. The openvpn program starts fine. I've installed openvpn many times on several machines. both centos 5 and centos 6 and got it working ok but this latest version on 64 bit will not work. I'm generating keys using easy-rsa I got with git. I've tried both easy-rsa/1.0 and /2.0. Previous versions on openvpn always included easy-rsa but I'm wondering if there's a bug with this new separation...
I installed openvpn using yum install from opevpn's own repo at:
http://repos.openvpn.net/repos/yum/conf/repos.openvpn.net-CentOS6-snapshots.txt
I'm connecting to openvpn from a remote windows xp machine with the little windows gui connector. The windows gui connects to my other machines fine but when connecting to the 64bit machine I always get:
VERIFY ERROR: depth=1, error=certificate signature failure: /C= <snip>
TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
TLS Error: TLS object -> incoming plaintext read error
TLS Error: TLS handshake failed
my server.conf: (this conf file has always worked with a range of centos machines)
port 1194
proto tcp
dev tun
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh2048.pem <-- tried dh1024 as well, it made no difference
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 172.16.0.0 255.255.0.0"
push "route 172.16.1.0 255.255.0.0"
push "redirect-gateway"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
log /var/log/openvpn.log
verb 4
my client.ovpn (on the remote machine)
client
dev tun
proto tcp
remote <openvpn-server-ip> 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca C:-->path-to->ca.crt
cert C:-->path-to->client.crt
key C:-->path-to->client.key
ns-cert-type server
route 172.16.1.0. 255.255.0.0
comp-lzo
verb 7
thanks for any help
