itstaden Hi, I'v tried to install a cert from rapidssl but cant seem to get it to work. I'm getting this error when i try and connect Unexpected error: untrusted_cert: X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY I'v tried and find the issue behind this but with no luck, anyone that can help me with this issue? /Kristoffer
janjust check the certificate, check that you have the right CA certificate (from rapid SSL) and verify that the certificate chain is actually valid: openssl verify -CAfile rapid-ssl-ca.crt client.crt
itstaden openssl verify -CAfile rapid-ssl-ca.crt client.crt .... error 20 at 0 depth lookup:unable to get local issuer certificate Did get some more info out of that, thx for that. That meens i dont have the right rapid ssl ca cert right? /Kristoffer
janjust either that, or you're missing part of the certificate chain that should be supplied by rapid SSL. You can post your public certificates here (or on pastebin) so we can take a look. Setting up OpenVPN using a third party (commercial) CA provider is possible (I use it regularly) but it can be a bit tricky when long chains of CAs and sub-CAs are involved.
itstaden This is the cert i got from rapidssl http://pastebin.com/H20gBKP4 The sha1 fingerprint, how does it work with the certs? Shoud my hash sum be the same as the ca cert or? /Kristoffer
janjust you're missing the rapid SSL CA and GlobalTrust CA certificates ; see http://pastebin.com/nX4Nmjt4 for the 2 CA certs that you're missing
itstaden With that info it all worked out. Just wanted to say, thank you very much for your help janjust /Kristoffer
itstaden What i did. I used the two CA cert janjust linked as the intermediate/Web Server CA Bundle. Did an # openssl verify -CAfile ca.XX.cert my.public.crt got an "OK" as answer, so i used that cert in our openvpn server /Kristoffer
