bad X509 key usage in leaf certificate
Posted: Wed Dec 18, 2013 3:35 pm
I've got a problem at connection time. AFAICS the certificate chain is verified correctly, but then openVPN fails with
The X509v3 extensions of my certificate are
On Linux this works fine, so every helpful comment is highly appreciated.
The openVPN app is version 1.0.2.
Code: Select all
VERIFY FAIL -- bad X509 key usage in leaf certificate
Transport Error: PolarSSL: SSL read error : X509 - Certificate verification failed, e.g. CRL, CA or signature check failed
EVENT: CERT_VERIFY_FAIL PolarSSL: SSL read error : X509 - Certificate verification failed, e.g. CRL, CA or signature check failed [ERR]
EVENT: DISCONNECTED
Code: Select all
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Key Usage: critical
Digital Signature, Key Encipherment, Data Encipherment, Key Agreement
X509v3 Extended Key Usage:
TLS Web Client Authentication
Netscape Comment:
xca certificate
The openVPN app is version 1.0.2.
