nandopina80
Hello everyone.
10 years have passed since I first create my openVPN Server and embedded a openVPN Client on my equipments to ensure secure communication over cellular networks...
Everything when fine until yesterday... for my complete mistake I forgot my certificate would expire some day (10 years in my case).
Now I have aroud 4000 equipments, each one with its unique own CRT/KEY files and a "ca.crt" that is expired. Following a other posts on this forum, I was able to "RENEW" my Server Certificate and "keys". I´ve put renewed "ca.crt" file on my computer and got connected to my server....
BUT I CAN´T SEND this recently created "ca.crt" file to my 4000 equipments because I don´t have them connected to my Server...
Is there any way to BYPASS this issue? At least for a couple days, so I can remote update each client with this new certificate? Can I reconfigure my server to ignore clients with this "old" ca.crt?
I need help...
TinCanTech
Your CA has totally expired and there is nothing which openvpn can do to help you fix this.
Without very detailed information, I doubt there is anything you can do but to visit (physically or virtually) each and every device.
Hind-sight tells me, you need a proper disaster recovery scenario and now that you have experience in disasters you can probably prepare for such in the future ..
If all else fails you can contact me privately: tincanteksup <at> gmail