I am trying to setup OpenVPN at home but I am having problems. Client keeps giving Verify error depth 1 error. I noticed the client using a certificate by watchguard_technologies but I don't know why it is doing it. I point the key and cert files in the configuration file and when i put in the local ip address it works fine but ass soon as i use public ip it starts using the watchguard cert. I am stumped. Please help.
Server Log:
Mon Jun 16 12:54:02 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jun 5 2014
Mon Jun 16 12:54:02 2014 library versions: OpenSSL 1.0.1h 5 Jun 2014, LZO 2.05
Mon Jun 16 12:54:02 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Jun 16 12:54:02 2014 Need hold release from management interface, waiting...
Mon Jun 16 12:54:03 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Jun 16 12:54:03 2014 MANAGEMENT: CMD 'state on'
Mon Jun 16 12:54:03 2014 MANAGEMENT: CMD 'log all on'
Mon Jun 16 12:54:03 2014 MANAGEMENT: CMD 'hold off'
Mon Jun 16 12:54:03 2014 MANAGEMENT: CMD 'hold release'
Mon Jun 16 12:54:03 2014 Diffie-Hellman initialized with 1024 bit key
Mon Jun 16 12:54:03 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Jun 16 12:54:03 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Jun 16 12:54:03 2014 MANAGEMENT: >STATE:1402934043,ASSIGN_IP,,10.8.0.1,
Mon Jun 16 12:54:03 2014 open_tun, tt->ipv6=0
Mon Jun 16 12:54:03 2014 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{B7A5C5B2-45D2-47B0-9C11-D2C8CDC9E81C}.tap
Mon Jun 16 12:54:03 2014 TAP-Windows Driver Version 9.9
Mon Jun 16 12:54:03 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.0 on interface {B7A5C5B2-45D2-47B0-9C11-D2C8CDC9E81C} [DHCP-serv: 10.8.0.0, lease-time: 31536000]
Mon Jun 16 12:54:03 2014 Sleeping for 10 seconds...
Mon Jun 16 12:54:13 2014 Successful ARP Flush on interface [23] {B7A5C5B2-45D2-47B0-9C11-D2C8CDC9E81C}
Mon Jun 16 12:54:13 2014 Listening for incoming TCP connection on [undef]
Mon Jun 16 12:54:13 2014 TCPv4_SERVER link local (bound): [undef]
Mon Jun 16 12:54:13 2014 TCPv4_SERVER link remote: [undef]
Mon Jun 16 12:54:13 2014 MULTI: multi_init called, r=256 v=256
Mon Jun 16 12:54:13 2014 IFCONFIG POOL: base=10.8.0.2 size=253, ipv6=0
Mon Jun 16 12:54:13 2014 ifconfig_pool_read(), in='Tolga,10.8.0.2', TODO: IPv6
Mon Jun 16 12:54:13 2014 succeeded -> ifconfig_pool_set()
Mon Jun 16 12:54:13 2014 IFCONFIG POOL LIST
Mon Jun 16 12:54:13 2014 Tolga,10.8.0.2
Mon Jun 16 12:54:13 2014 MULTI: TCP INIT maxclients=60 maxevents=64
Mon Jun 16 12:54:13 2014 Initialization Sequence Completed
Mon Jun 16 12:54:13 2014 MANAGEMENT: >STATE:1402934053,CONNECTED,SUCCESS,10.8.0.1,
Client Log:
Mon Jun 16 12:54:28 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jun 5 2014
Mon Jun 16 12:54:28 2014 library versions: OpenSSL 1.0.1h 5 Jun 2014, LZO 2.05
Enter Management Password:
Mon Jun 16 12:54:28 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Jun 16 12:54:28 2014 Need hold release from management interface, waiting...
Mon Jun 16 12:54:28 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Jun 16 12:54:29 2014 MANAGEMENT: CMD 'state on'
Mon Jun 16 12:54:29 2014 MANAGEMENT: CMD 'log all on'
Mon Jun 16 12:54:29 2014 MANAGEMENT: CMD 'hold off'
Mon Jun 16 12:54:29 2014 MANAGEMENT: CMD 'hold release'
Mon Jun 16 12:54:29 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jun 16 12:54:29 2014 MANAGEMENT: >STATE:1402934069,RESOLVE,,,
Mon Jun 16 12:54:29 2014 Attempting to establish TCP connection with [AF_INET]173.252.62.139:443
Mon Jun 16 12:54:29 2014 MANAGEMENT: >STATE:1402934069,TCP_CONNECT,,,
Mon Jun 16 12:54:29 2014 TCP connection established with [AF_INET]*.*.62.139:443
Mon Jun 16 12:54:29 2014 TCPv4_CLIENT link local: [undef]
Mon Jun 16 12:54:29 2014 TCPv4_CLIENT link remote: [AF_INET]*.*.62.139:443
Mon Jun 16 12:54:29 2014 MANAGEMENT: >STATE:1402934069,WAIT,,,
Mon Jun 16 12:54:29 2014 MANAGEMENT: >STATE:1402934069,AUTH,,,
Mon Jun 16 12:54:29 2014 TLS: Initial packet from [AF_INET]*.*.62.139:443, sid=e6208dd8 d8eebf91
Mon Jun 16 12:54:29 2014 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: O=WatchGuard_Technologies, OU=Fireware, CN=Fireware SSLVPN (SN 80BD03BCAC143 2012-06-11 05:28:23 GMT) CA
Mon Jun 16 12:54:29 2014 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Mon Jun 16 12:54:29 2014 TLS Error: TLS object -> incoming plaintext read error
Mon Jun 16 12:54:29 2014 TLS Error: TLS handshake failed
Mon Jun 16 12:54:29 2014 Fatal TLS error (check_tls_errors_co), restarting
Mon Jun 16 12:54:29 2014 SIGUSR1[soft,tls-error] received, process restarting
Mon Jun 16 12:54:29 2014 MANAGEMENT: >STATE:1402934069,RECONNECTING,tls-error,,
Mon Jun 16 12:54:29 2014 Restart pause, 5 second(s)
Mon Jun 16 12:54:34 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jun 16 12:54:34 2014 MANAGEMENT: >STATE:1402934074,RESOLVE,,,
Mon Jun 16 12:54:34 2014 Attempting to establish TCP connection with [AF_INET]173.252.62.139:443
Mon Jun 16 12:54:34 2014 MANAGEMENT: >STATE:1402934074,TCP_CONNECT,,,
Mon Jun 16 12:54:34 2014 TCP connection established with [AF_INET]*.*.62.139:443
Mon Jun 16 12:54:34 2014 TCPv4_CLIENT link local: [undef]
Mon Jun 16 12:54:34 2014 TCPv4_CLIENT link remote: [AF_INET]*.*.62.139:443
Mon Jun 16 12:54:34 2014 MANAGEMENT: >STATE:1402934074,WAIT,,,
Mon Jun 16 12:54:34 2014 MANAGEMENT: >STATE:1402934074,AUTH,,,
Mon Jun 16 12:54:34 2014 TLS: Initial packet from [AF_INET]*.*.62.139:443, sid=44439900 b2c6d924
Mon Jun 16 12:54:34 2014 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: O=WatchGuard_Technologies, OU=Fireware, CN=Fireware SSLVPN (SN 80BD03BCAC143 2012-06-11 05:28:23 GMT) CA
Mon Jun 16 12:54:34 2014 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Mon Jun 16 12:54:34 2014 TLS Error: TLS object -> incoming plaintext read error
Mon Jun 16 12:54:34 2014 TLS Error: TLS handshake failed
Mon Jun 16 12:54:34 2014 Fatal TLS error (check_tls_errors_co), restarting
Mon Jun 16 12:54:34 2014 SIGUSR1[soft,tls-error] received, process restarting
Mon Jun 16 12:54:34 2014 MANAGEMENT: >STATE:1402934074,RECONNECTING,tls-error,,
Mon Jun 16 12:54:34 2014 Restart pause, 5 second(s)
Mon Jun 16 12:54:37 2014 SIGTERM[hard,init_instance] received, process exiting
Mon Jun 16 12:54:37 2014 MANAGEMENT: >STATE:1402934077,EXITING,init_instance,,
Server Config:
port 443
proto tcp
dev tap
;dev-node MyTap
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
Client Config:
client
dev tap
;dev-node MyTap
proto tcp
remote *.dnsdynamic.com 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\Tolga.crt"
key "C:\\Program Files\\OpenVPN\\config\\Tolga.key"
ns-cert-type server
comp-lzo
verb 3
