No server certificate verification method has been enabled.

BubbaJoe

Hi folks, I have a problem setting up openVPN. I have a netgear r7000 router with openVPN built in. I have a dynamic dns, so i've enabled that function in the router as well. I have downloaded openVPN to my (win 8.1 cpu) and open connect to my android phone and copy pasted the config files to both machines. My ntp server time is correct. When I run openVPN I get: WARNING: No server certificate verification method has been enabled.

I am not sure what to do at this point. I am not tech savy enough to understand the problem or how to correct it. I have been to OpenVPNs Howto page and do not understand the steps I need to take. I've downloaded and reinstalled it four times. Please help.

Thx Bubba

TinCanTech

The warning is:

Log file wroteWARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.

BubbaJoe

TinCanTech wrote The warning is:
Log file wroteWARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.

Correct. Ive read it several times. I'm not tech savy enough to understand where or how to insert it. I tried inserting it in the config file but when I try to save it, it says access denied. I'm logged in as admin.

I make furniture for a living. Dealing with code or anything computer related is a steep learning curve.

containing

TinCanTech wrote The warning is:
Log file wroteWARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.

The device is a Netgear router, NOT a Linux server ( if you even know what that is )

BubbaJoe wrote
TinCanTech wrote The warning is:
Log file wroteWARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.

Correct. Ive read it several times. I'm not tech savy enough to understand where or how to insert it. I tried inserting it in the config file but when I try to save it, it says access denied. I'm logged in as admin.

I make furniture for a living. Dealing with code or anything computer related is a steep learning curve.

Don't worry you'll find most people here ( and on the netgear forums ) only respond to attempt to make you look like an idiot or be a smart alec, just like tin did, since they have no idea so they simply pasted a link without reading your post. Given the how to does not help people with the router since there is 0 area to configure the server side ONLY the client which u would need to check the server side for.

It'd be great if people like Tin learned some respect for others vs getting angry at everyone but hey its the internet. Either way one of the issues appears to be w/ netgears certificate expiring and theres no way to update it since the firmware does not contain it. This is a flaw on netgears side and they have no intent on fixing as stated on their forums after numerous have pointed it out.

TinCanTech

containing wrote The device is a Netgear router, NOT a Linux server ( if you even know what that is )

Which makes no difference.

containing wrote they simply pasted a link without reading your post

The link clearly explains the problem and the solutions.

containing wrote Given the how to does not help people with the router

It is the Openvpn HOWTO not your router howto. Openvpn does not provide support for individual routers, go to your router website for help with that.

containing wrote one of the issues appears to be w/ netgears certificate expiring and theres no way to update it since the firmware does not contain it. This is a flaw on netgears side and they have no intent on fixing as stated on their forums after numerous have pointed it out.

This is incorrect and unrelated.

Use EasyRSA to create your PKI with one of the methods described in the first link (which is all explained again in the EasyRSA documentation). Then upload the desired certificate to your device and add the desired server certificate verification method to your client config. It could not be much simpler ..

As for the rest of your personal comments .. I do not feed the trolls .. if you can do a better job then do it !

OpenVPN.net Welcome every person that is willing and able to help, in any way at all .. just ask ..

containing

TinCanTech wrote
containing wrote The device is a Netgear router, NOT a Linux server ( if you even know what that is )
Which makes no difference.

containing wrote they simply pasted a link without reading your post
The link clearly explains the problem and the solutions.

containing wrote Given the how to does not help people with the router
It is the Openvpn HOWTO not your router howto. Openvpn does not provide support for individual routers, go to your router website for help with that.

containing wrote one of the issues appears to be w/ netgears certificate expiring and theres no way to update it since the firmware does not contain it. This is a flaw on netgears side and they have no intent on fixing as stated on their forums after numerous have pointed it out.
This is incorrect and unrelated.

Use EasyRSA to create your PKI with one of the methods described in the first link (which is all explained again in the EasyRSA documentation). Then upload the desired certificate to your device and add the desired server certificate verification method to your client config. It could not be much simpler ..

As for the rest of your personal comments .. I do not feed the trolls .. if you can do a better job then do it !

OpenVPN.net Welcome every person that is willing and able to help, in any way at all .. just ask ..

You say it makes no difference which just proves you didn't look into anything and just simply treated the OP like they were stupid. The router gives 0 options to change anything, unless you install a custom firmware, but clearly that makes no difference so I won't feed that troll comment, since we're refraining from it.

The link clearly explains steps that cannot be achieved due to no settings being configurable from a server stand point, BUT again we're not feeding trolls here right? 😃

Yous state to use EasyRSA, again not feeding trolls on this one.

I'm glad OpenVPN welcomes every person that is willing however simply tossing the help guide after not even reading the persons post or even commenting after they re-explain themselves really shows otherwise. They did ask and you did your best to ignore them but were quick to respond to me when I called you out on it. At least we know where the priorities are with you.

Its not about doing a better job its simply about either responding if you can assist and read or ignoring it if you simply don't know, I doubt that person is even here anymore.

TinCanTech

containing wrote You say it makes no difference which just proves you didn't look into anything

It makes no difference .. you create a PKI with the correct certificate usage and then set the client to check it. But as you clearly have not read the link you still do not understand.

containing wrote The router gives 0 options to change anything, unless you install a custom firmware

Complain to your router manufacturer .. we cannot help you with that.

TinCanTech wrote Use EasyRSA to create your PKI with one of the methods described in the first link (which is all explained again in the EasyRSA documentation). Then upload the desired certificate to your device and add the desired server certificate verification method to your client config. It could not be much simpler ..

As I said before, this can be solved without needing your router to co-operate, so long as you can upload a new PKI to the device then you can solve it. If you cannot upload a new PKI to the device then you should probably throw it away and get something decent, to which you can upload a new PKI.

containing wrote The link clearly explains steps that cannot be achieved due to no settings being configurable from a server stand point

It has nothing to do with your server .. but then you would know that if you read the link.

Adios 8-)