Adding new users/certs fails?

luis84

Hello,

I run OpenVPN server on Windows Server 08.

I have multiple clients, it works great. The issue is, if I reboot the server, and go to add more clients, it fails. ca.key is missing everytime. Generates errors.

So, to resolve the issue, i run this from the easy-ra directory.

vars
clean-all
build-ca

Next, I generate new client certs:

build-key client20

If I attempt to connect with any of those new certs, it fails. Says, "self signed certificate detected" and won't ever let them connect. Clients who were already added from before can still connect fine. Nothing seems to fix it except completely remove, re install and start from 0.

Any hints or help on my mistake?

maikcat

are you using x64 version of win8?

also you can always copy your keys to another pc and build them there..

i always create my keys in linux but some servers use win xp 😉

Michael.

luis84

Hello - Win Server 2008 64 bit.

Any ideas on how to fix this / or how to generate certs on another machine? I have no idea.

luis84

Exact error is:

Sat Jan 28 00:35:27 2012 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain:
Sat Jan 28 00:35:27 2012 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Sat Jan 28 00:35:27 2012 TLS Error: TLS object -> incoming plaintext read error
Sat Jan 28 00:35:27 2012 TLS Error: TLS handshake failed
Sat Jan 28 00:35:27 2012 TCP/UDP: Closing socket