Openvpn mesages log certificate expired and tls shake failed.

[deleted]

Guys,
I need help.
I have um openvpn server that show messages log "CRL HAS EXPIRED" AND "ERROR TLS HANDSHAKE FAILED".
Thank you.

TinCanTech

Written for you:
https://forums.openvpn.net/viewtopic.php?f=30&t=22603

[deleted]

Flavio_Analista wrote Guys,
I need help.
I have um openvpn server that show messages log "CRL HAS EXPIRED" AND "ERROR TLS HANDSHAKE FAILED".
Thank you.

In server log:
Tue Feb 16 15:14:36 2021 179.242.8.107:2207 OpenSSL: error:14089086:SSL routines:ssl3_get_client_certificate:certificate verify failed
Tue Feb 16 15:14:36 2021 179.242.8.107:2207 TLS_ERROR: BIO read tls_read_plaintext error
Tue Feb 16 15:14:36 2021 179.242.8.107:2207 TLS Error: TLS object -> incoming plaintext read error
Tue Feb 16 15:14:36 2021 179.242.8.107:2207 TLS Error: TLS handshake failed

TinCanTech

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

openvpn_inc

Hello Flavio_Analista,

Are you using the OpenVPN Access Server program on the server side?

> SSL routines:ssl3_get_client_certificate:certificate verify failed

That error usually means your CA certificate and/or client certificate has expired. The solution there is to replace them.

Kind regards,
Johan

RDL

Hello,

I am getting also same error in newly generated Certificates.the exact error is

2021-02-25 13:36:31.661606 VERIFY ERROR: depth=1, error=unable to get issuer certificate: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
2021-02-25 13:36:31.661666 OpenSSL: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
2021-02-25 13:36:31.661678 TLS_ERROR: BIO read tls_read_plaintext error
2021-02-25 13:36:31.661686 TLS Error: TLS object -> incoming plaintext read error
2021-02-25 13:36:31.661694 TLS Error: TLS handshake failed
2021-02-25 13:36:31.661920 SIGUSR1[soft,tls-error] received, process restarting

Please help,stuck on the error since a week

Thanks