I'm having issues connecting to my softether server through my openvpn client. When I setup the client with user/password authentication I can connect, however when using key/cert authentication is when i run into problems. Any help would be appreciated.
This is the error I'm receiving
Wed Dec 13 15:01:14 2017 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: C=US, ST=NY, L=SpringValley, O=IndusConsultancyServices, CN=ROOT CA
This is the openvpn client log file
Wed Dec 13 15:01:10 2017 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
Wed Dec 13 15:01:10 2017 Windows version 6.1 (Windows 7) 64bit
Wed Dec 13 15:01:10 2017 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.10
Enter Management Password:
Wed Dec 13 15:01:10 2017 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Dec 13 15:01:10 2017 Need hold release from management interface, waiting...
Wed Dec 13 15:01:10 2017 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Dec 13 15:01:10 2017 MANAGEMENT: CMD 'state on'
Wed Dec 13 15:01:10 2017 MANAGEMENT: CMD 'log all on'
Wed Dec 13 15:01:10 2017 MANAGEMENT: CMD 'echo all on'
Wed Dec 13 15:01:10 2017 MANAGEMENT: CMD 'hold off'
Wed Dec 13 15:01:10 2017 MANAGEMENT: CMD 'hold release'
Wed Dec 13 15:01:10 2017 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Dec 13 15:01:14 2017 MANAGEMENT: CMD 'password [...]'
Wed Dec 13 15:01:14 2017 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Dec 13 15:01:14 2017 MANAGEMENT: >STATE:1513195274,RESOLVE,,,,,,
Wed Dec 13 15:01:14 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]**.**.**.**:6078
Wed Dec 13 15:01:14 2017 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Dec 13 15:01:14 2017 UDP link local: (not bound)
Wed Dec 13 15:01:14 2017 UDP link remote: [AF_INET]**.**.**.**:6078
Wed Dec 13 15:01:14 2017 MANAGEMENT: >STATE:1513195274,WAIT,,,,,,
Wed Dec 13 15:01:14 2017 MANAGEMENT: >STATE:1513195274,AUTH,,,,,,
Wed Dec 13 15:01:14 2017 TLS: Initial packet from [AF_INET] **.**.**.**:6078, sid=4b3244b0 33d9683a
Wed Dec 13 15:01:14 2017 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: C=US, ST=NY, L=SpringValley, O=IndusConsultancyServices, CN=ROOT CA
Wed Dec 13 15:01:14 2017 OpenSSL: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Wed Dec 13 15:01:14 2017 TLS_ERROR: BIO read tls_read_plaintext error
Wed Dec 13 15:01:14 2017 TLS Error: TLS object -> incoming plaintext read error
Wed Dec 13 15:01:14 2017 TLS Error: TLS handshake failed
Wed Dec 13 15:01:14 2017 SIGUSR1[soft,tls-error] received, process restarting
Wed Dec 13 15:01:14 2017 MANAGEMENT: >STATE:1513195274,RECONNECTING,tls-error,,,,,
Wed Dec 13 15:01:14 2017 Restart pause, 5 second(s)
Wed Dec 13 15:01:17 2017 SIGTERM[hard,init_instance] received, process exiting
Wed Dec 13 15:01:17 2017 MANAGEMENT: >STATE:1513195277,EXITING,init_instance,,,,,
Here's my configuration file
###############################################################################
# OpenVPN 2.0 Configuration File
# for PacketiX VPN / SoftEther VPN Server
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.
###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
# specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
dev tap
###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.
proto udp
###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
# Note: The below hostname is came from the Dynamic DNS Client function
# which is running on the VPN Server. If you don't want to use
# the Dynamic DNS hostname, replace it to either IP address or
# other domain's hostname.
remote indus-vpn.v4.softether.net 6078
###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.
;http-proxy-retry
;http-proxy [proxy server] [proxy port]
###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
# cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
# RC2-40-CBC RC2-64-CBC RC2-CBC
# auth: SHA SHA1 MD5 MD4 RMD160
#cipher AES-128-CBC
#auth SHA1
###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.
resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
#auth-user-pass
###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
key "test.key"
cert "test.cer"
ca "serv.cer"
