omortis Hello All, Following Ristic's OpenSSL Cookbook, I configured a CA, then a sub-CA, and then generated certs for the server and all clients using that sub-Ca. In the server.conf file, the "ca" line is the crt generated for the sub-CA in my list above, correct? And this sub-CA cert needs to be distributed to the clients? Can't seem to get around the dreaded "VERIFY ERROR: depth=0, error=unable to get local issuer certificate:" error... Thanks, John
TinCanTech omortis wrotethe dreadedPlease see: HOWTO: Request Help ! omortis wroteOpenSSL Cookbookhttps://openvpn.net/index.php/open-source/books.html Last resort: https://community.openvpn.net/openvpn/wiki/Using_Certificate_Chains
omortis Certificate Chains is what I needed - thanks! Will be sure to provide more info in the future! It was such a simple question I decided not to... Thanks again, John
