md5 warning on OpenVPN Connect 1.2.8

glc650

Hi,

I'm getting the md5 warning outlined in the release notes of this version even though I don't have any certs signed by md5:

root@bedroom-nas:/volume1/users/# openssl x509 -in udp.conf -noout -text | grep "Signature Algorithm"
Signature Algorithm: sha256WithRSAEncryption
Signature Algorithm: sha256WithRSAEncryption

On my iPhone 8+ (iOS 11.2.6) it still connects but I'm assuming that won't happen come April? On my iPad Air 2 (iOS 11.2.6) it fails to connect.

Thanks,

->g.

ordex

is the server certificate also signed with sha256?

glc650

ordex wrote is the server certificate also signed with sha256?

Looks like that is the issue. I used this guide when creating all the files:

https://community.openvpn.net/openvpn/wiki/Easy_Windows_Guide#DownloadingandInstallingOpenVPN

What do I need to do to make sure SHA2 is used when I recreate them?

ordex

a recent easyrsa will already use sha256 by default