Hello,
I have an IP phone that apparently only supports using MD5 for signing certificates. I recently replaced my phone server with a new one that is running Centos 7, and I can't get OpenVPN working again.
openvpn[385]: VERIFY ERROR: depth=1, error=certificate signature failure: /C=US/ST=NV/L=Reno/O=Fort-Funston/OU=server/CN=freepbx/name=freepbx/emailAddress=mail@host.domain
openvpn[385]: TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
openvpn[385]: TLS Error: TLS object -> incoming plaintext read error
openvpn[385]: TLS Error: TLS handshake failed
openvpn[385]: Fatal TLS error (check_tls_errors_co), restarting
There was a post on this forum where someone posted a reply from Yealink support that indicated this phone only supports MD5. Is there a way to override OpenSSL/OpenVPN to allow MD5. This is only a phone server that lives in a DMZ, so even though I understand the security implications, I do need to get this to work.
