300000 wrote
Why does client connect to open access server will not have that scare warning at all? This is so different between paid version and free community . The same source but the way it work is not.
because the PKI on Access Server is configured properly automatically.
A user creating his own PKI/configuration may not do the right thing and the warning shows up (not sure why you think it's scary though)
300000 wrote
When use Easy RSA to use openssl to generate certificate in openssl config they just forgot to add " extendedKeyUsage= TLS Web Server Authentication" but this is include in open access server .
Indeed, if you don't know what you are doing it's easy to end up with something that misses some attribute or something else.
This is true for anything in life..
300000 wrote
That is why peoples dont know how and why. But it is ok for personal use anyway. For business they need to buy paid version for full protection.
Peoples can use XCA to create full certificate and use in openvpn and can add whatever yhey like but take time to learn and use it .
Again, you can learn what you need to do and do it right, like with everything else.
If you don't want to learn..well, feel free to do what you want :-)
