[deleted]
Ok, new question. 🙂
OpenVPN AS seems to be working pretty well as far as getting clients connected. However, I was constantly getting Untrusted certificate errors due to the self signed certificate that was auto generated. I used the admin interface, and web-ssl to replace the self signed certificate with a wildcard certificate from GoDaddy. Browsers are fine with it when I go to the admin or user OpenVPN web site. The client systems all have GoDaddy's CA certs installed in Windows, but when I pull up OpenVPN Connect, I get a warning that the wildcard certificate is untrusted. Is there some other place that OpenVPN Connect looks for CA certs? I looked in Program Files on the client, and found a ca.crt file there, which I replaced with GoDaddy's CA cert bundle, but that didn't seem to help at all.
[deleted]
Never Mind. I deleted the profile on the client, then went through the profile import process again and now the ssl cert verification is fine. It must include the CA bundle I added via web-ssl with the client profile? I also noticed that going through the process on a fresh client system shows no hint of SSL verification errors. So...rock on!
