VERIFY ERROR: depth=1, error=self signed certificate in cert

This forum is for all inquiries relating to the installation of OpenVPN from source and with binaries.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please visit (and READ) the OpenVPN HowTo http://openvpn.net/howto prior to asking any questions in here!
Post Reply
simonlawrence
OpenVpn Newbie
Posts: 1
Joined: Wed Jul 01, 2015 4:29 pm

VERIFY ERROR: depth=1, error=self signed certificate in cert

Post by simonlawrence » Wed Jul 01, 2015 4:38 pm

Unable to connect to VPN server from my ubuntu client system, Please find below log of client.

Wed Jul 1 21:42:38 2015 OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Dec 1 2014
Wed Jul 1 21:42:38 2015 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jul 1 21:42:38 2015 LZO compression initialized
Wed Jul 1 21:42:38 2015 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Jul 1 21:42:38 2015 Socket Buffers: R=[163840->131072] S=[163840->131072]
Wed Jul 1 21:42:38 2015 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jul 1 21:42:38 2015 Local Options hash (VER=V4): '41690919'
Wed Jul 1 21:42:38 2015 Expected Remote Options hash (VER=V4): '530fdded'
Wed Jul 1 21:42:38 2015 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Wed Jul 1 21:42:38 2015 UDPv4 link local: [undef]
Wed Jul 1 21:42:38 2015 UDPv4 link remote: [AF_INET]xx.xx.xx.xx:1194
Wed Jul 1 21:42:39 2015 TLS: Initial packet from [AF_INET]xx.xx.xx.xx:1194, sid=ce83c406 b32fc8bc
Wed Jul 1 21:42:43 2015 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: /C=US/ST=TX/L=TX/O=Pinnacle_Seven/OU=P7_US/CN=Pinnacle_Seven_CA/name=server/emailAddress=server@pinnacleseven.com
Wed Jul 1 21:42:43 2015 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Wed Jul 1 21:42:43 2015 TLS Error: TLS object -> incoming plaintext read error
Wed Jul 1 21:42:43 2015 TLS Error: TLS handshake failed
Wed Jul 1 21:42:43 2015 TCP/UDP: Closing socket
Wed Jul 1 21:42:43 2015 SIGUSR1[soft,tls-error] received, process restarting
Wed Jul 1 21:42:43 2015 Restart pause, 2 second(s)
Wed Jul 1 21:42:45 2015 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jul 1 21:42:45 2015 Re-using SSL/TLS context
Wed Jul 1 21:42:45 2015 LZO compression initialized
Wed Jul 1 21:42:45 2015 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Jul 1 21:42:45 2015 Socket Buffers: R=[163840->131072] S=[163840->131072]
Wed Jul 1 21:42:45 2015 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jul 1 21:42:45 2015 Local Options hash (VER=V4): '41690919'
Wed Jul 1 21:42:45 2015 Expected Remote Options hash (VER=V4): '530fdded'
Wed Jul 1 21:42:45 2015 UDPv4 link local: [undef]
Wed Jul 1 21:42:45 2015 UDPv4 link remote: [AF_INET]xx.xx.xx.xx:1194
Wed Jul 1 21:42:46 2015 TLS: Initial packet from [AF_INET]xx.xx.xx.xx:1194, sid=714f3ff1 c8e87ef6
Wed Jul 1 21:42:49 2015 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: /C=US/ST=TX/L=TX/O=Pinnacle_Seven/OU=P7_US/CN=Pinnacle_Seven_CA/name=server/emailAddress=server@pinnacleseven.com
Wed Jul 1 21:42:49 2015 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

User avatar
maikcat
Forum Team
Posts: 4200
Joined: Wed Jan 12, 2011 9:23 am
Location: Athens,Greece
Contact:

Re: VERIFY ERROR: depth=1, error=self signed certificate in

Post by maikcat » Thu Jul 02, 2015 8:36 am

server config/logs?
client config?

Michael.

Post Reply