Thank you in advanced
so I followed
https://community.openvpn.net/openvpn/wiki/EasyRSA3-OpenVPN-Howto
because the main site how to cert part doesn't apply any more.
Tue Nov 04 00:23:05 2014 VERIFY OK: depth=1, CN=tcehouse
Tue Nov 04 00:23:05 2014 VERIFY nsCertType ERROR: CN=tcehouseKVMtest, require ns
CertType=SERVER
Tue Nov 04 00:23:05 2014 TLS_ERROR: BIO read tls_read_plaintext error: error:140
90086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Tue Nov 04 00:23:05 2014 TLS Error: TLS object -> incoming plaintext read error
Tue Nov 04 00:23:05 2014 TLS Error: TLS handshake failed
here are conf files
I tried to make a server one
local 192.168.234.11
port 1194
proto tcp
dev tun
ca /etc/openvpn/c/ca.crt
cert /etc/openvpn/c/tcehouseKVMtest.crt
key /etc/openvpn/k/tcehouseKVMtest.key # This file should be kept secret
dh /etc/openvpn/d/dh.pem
server 192.168.235.0 255.255.255.0
push "route 192.168.234.0 255.255.255.0"
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
was lazy on client as my hope of this working was dwindling.... so I used the stock config
( I know a year+ ago open vpn worked, but now the ras thing is separate :-/ ... )
client
dev tun
proto tcp
remote 192.168.234.11 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca C:\\OpenVPN\\bin\\ca.crt
cert C:\\OpenVPN\\bin\\client1.crt
key C:\\OpenVPN\\bin\\client1.key
ns-cert-type server
comp-lzo
verb 3
server is a centos 7 box ( can I blame my problem on systemd??... firewalld, networkmanager, selinux are disabled)
client is windows 7
also I'm having to lunch openvpn from the command line as the gui isn't doing anything
