Commercial Wildcard DV Certificate Connection Issue

Scripts to manage certificates or generate config files

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Post Reply
imperio
OpenVpn Newbie
Posts: 1
Joined: Thu Dec 20, 2012 11:31 pm

Commercial Wildcard DV Certificate Connection Issue

Post by imperio » Thu Mar 28, 2013 6:37 am

Hello,

I am using a AlphaSSL DV wildcard certificate.At first try i did not chain the certs and i was getting below error on the client.

2013-03-28 05:51:40 TLS: Initial packet from 216.*.*.*:1194, sid=bc742e8b 6bb5d8ed
2013-03-28 05:51:40 VERIFY ERROR: depth=0, error=unable to get local issuer certificate: /OU=Domain_Control_Validated/CN=_.domain.com
2013-03-28 05:51:40 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
2013-03-28 05:51:40 TLS Error: TLS object -> incoming plaintext read error
2013-03-28 05:51:40 TLS Error: TLS handshake failed
2013-03-28 05:51:40 TCP/UDP: Closing socket
2013-03-28 05:51:40 SIGUSR1[soft,tls-error] received, process restarting
2013-03-28 05:51:40 MANAGEMENT: >STATE:1364442700,RECONNECTING,tls-error,,


After chaining globalsign root certificate with the alphassl intermediate certificate error message complains about the subdomain now.


2013-03-28 07:05:15 MANAGEMENT: >STATE:1364447115,AUTH,,,
2013-03-28 07:05:15 TLS: Initial packet from 216.*.*.*:1194, sid=cc3e391d 82845c44
2013-03-28 07:05:15 VERIFY OK: depth=2, /C=BE/O=GlobalSign_nv-sa/OU=Root_CA/CN=GlobalSign_Root_CA
2013-03-28 07:05:15 VERIFY OK: depth=1, /O=AlphaSSL/CN=AlphaSSL_CA_-_G2
2013-03-28 07:05:15 VERIFY X509NAME ERROR: /OU=Domain_Control_Validated/CN=_.domain.com, must be sub.domain.com
2013-03-28 07:05:15 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
2013-03-28 07:05:15 TLS Error: TLS object -> incoming plaintext read error
2013-03-28 07:05:15 TLS Error: TLS handshake failed

Please advise what to try next.

Thanks.

Post Reply