Hi all
I'm experiencing a very strange thing.
As my CA cert is about to expire, I created a new one with the same values. Both CA certs manage to verify the server's cert:
23:21:06 root@fileserver:/etc/openvpn# openssl verify -CAfile CA-rolamasao.org_cacert.2009-11-19.pem obrex.vpn.rolamasao.org_client_cert.pem
obrex.vpn.rolamasao.org_client_cert.pem: OK
23:21:13 root@fileserver:/etc/openvpn# openssl verify -CAfile CA-rolamasao.org_cacert.2013-11-18.pem obrex.vpn.rolamasao.org_client_cert.pem
obrex.vpn.rolamasao.org_client_cert.pem: OK
Same happens on client. But the server fails to accept client's connection:
Nov 18 23:21:56 fileserver ovpn-obrex.server[3792]: SANITIZED:60670 VERIFY ERROR: depth=0, error=unable to get local issuer certificate: /C=ES/ST=Valencia/L=Alfafar/O=SANITIZED/OU=OpenVPN/CN=SANITIZED/emailAddress=SANITIZED
Nov 18 23:21:56 fileserver ovpn-obrex.server[3792]: SANITIZED:60670 TLS_ERROR: BIO read tls_read_plaintext error: error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned
Nov 18 23:21:56 fileserver ovpn-obrex.server[3792]: SANITIZED:60670 TLS Error: TLS object -> incoming plaintext read error
Nov 18 23:21:56 fileserver ovpn-obrex.server[3792]: SANITIZED:60670 TLS Error: TLS handshake failed
Nov 18 23:21:56 fileserver ovpn-obrex.server[3792]: SANITIZED:60670 SIGUSR1[soft,tls-error] received, client-instance restarting
Can somebody give me some light?
Thanks in advance
