I'm having a repeated problem with getting a OpenVPN client connected to a server. I set this up, following the tutorial in the wiki, and it was working for several months. On Friday something (I'm not sure what, and nothing explicit) changed, and the client no longer connects with the server with a TLS_ERROR: Bad Signature.
I've rebuilt the certificate, and keys, verifying they are valid and correct. I've tried adjusting many of the OpenVPN parameters. Nothing seems to work. This is the error I get:
Mon Feb 24 15:30:52 2014 us=475028 UDPv4 link local: [undef]
Mon Feb 24 15:30:52 2014 us=475113 UDPv4 link remote: [AF_INET]38.104.31.194:1194
Mon Feb 24 15:30:52 2014 us=515386 TLS: Initial packet from [AF_INET]38.104.31.194:1194, sid=d677ecdb f294eca7
Mon Feb 24 15:30:52 2014 us=989609 VERIFY OK: depth=1, /C=US/ST=VA/L=Vienna/O=FoundationDB/CN=foundationdb-CA/name=foundationdb-ca/emailAddress=ian.peters@foundationdb.com
Mon Feb 24 15:30:52 2014 us=990209 VERIFY OK: nsCertType=SERVER
Mon Feb 24 15:30:52 2014 us=990264 VERIFY OK: depth=0, /C=US/ST=VA/L=Vienna/O=FoundationDB/CN=tomato/name=foundationdb-ca/emailAddress=ian.peters@foundationdb.com
Mon Feb 24 15:30:53 2014 us=27594 TLS_ERROR: BIO read tls_read_plaintext error: error:04091068:rsa routines:INT_RSA_VERIFY:bad signature: error:1408D07B:SSL routines:SSL3_GET_KEY_EXCHANGE:bad signature
Mon Feb 24 15:30:53 2014 us=27703 TLS Error: TLS object -> incoming plaintext read error
Mon Feb 24 15:30:53 2014 us=27741 TLS Error: TLS handshake failed
Mon Feb 24 15:30:53 2014 us=28081 TCP/UDP: Closing socket
My Client process (running on Unbuntu 12.04.04 and OpenVPN 2.2.1) has the following configuration:
client
dev tap0
proto udp
remote 38.104.31.194 1194
resolv-retry infinite
nobind
user nobody
group nobody
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.crt
ns-cert-type server
verb 4
