Can't configure OpenVpn on Synology NAS to access from android phone

paquechu

Hello

I am trying to configure openvpn in a synology NAS to be able to access with my mobile devices from the internet and I do not get it after several weeks.

I have a domain name that points to the ip of my router but it has not been assigned a digital certificate so I have decided to create a self-signed one to install on the NAS.

For the creation of the certificate I have used XCA following several tutorials but I am not able to get it; I do not know if the problem is in the creation of the certificates, in the installation of these in the NAS or in the openvpn client configuration of my mobile phone.

I have preferred to pose the problem in a pdf document given the length of my story.
Please see if anyone can detect what I am doing wrong.

In this document I have indicated the steps that I have been taking to make this configuration.

http://xurl.es/7mfmz

Thank you

Pippin

Something wrong with the certificates:

VERIFY ERROR: depth=0, error=unsupported certificate purpose:

Maybe this helps, OpenVPN templates for XCA:
https://www.synology-forum.nl/index.php?action=dlattach;topic=21402.0;attach=32270

paquechu

Hi, Pippin,
Thank you very much for your prompt response
I'm going to try these templates
Greetings

paquechu

Hello again
I have returned to generate the certificates using the templates that you have indicated to me, but unfortunately I still can not connect.
On this occasion the error that I get in the client part is the following:

VERIFY ERROR: depth = 0, error = unable to get local issuer certificate: C = US, O = ..........

At this moment I am not clear:
- If the certificates are well created
- i have successfully exported the certificates in the correct way
- If I have successfully imported the certificates in the NAS

When I have to do the import in the NAS, three fields are requested:
- Private Key
- Certificate
- Intermediate Certificate

Of the generated certificates, I do not know which ones I should import.

Thank you very much

paquechu

I have been able to solve it,
The problem was the creation of the certificates and the import of these in the NAS.
With the templates indicated by Pippin I could create the certificates in the correct way and import them later.
Thank you very much for the help :-)