my CA cert is expired and no access to clients

[kris vpn]

Hi,

I have a quite old version of openvpn (1.x) running on a centos 7 machine.
I am using the openvpn extension on webmin to manage the server/certs, and this extension only supports md5 certs (I know, work in progress to update the extension).

I understand that I must create a new CA based on the old CA using openssl option -signkey ca.key..

I also understand that I must send the new CA on all the clients and devices connecting to my server... this is now impossible to reach them since the CA cert is expired...

Question: Do I have to update all the certs of all the clients and the server ? Because, when I update the CA with the recipe given here : https://buger.dread.cz/openvpn-expired- ... cates.html they say the new ca.crt must be uploaded to all clients.

Is there any solution ?

Am I missing something?

Thank you a lot

[Pippin]

(I know, work in progress to update the extension)

Am I missing something?

You are missing update the whole thing to latest.....

[TinCanTech]

I have a quite old version of openvpn (1.x) running

May as well use GRE ..

Also, https://community.openvpn.net/openvpn/w ... sa-upgrade
You will need easyrsa3 git/master: https://github.com/OpenVPN/easy-rsa