howto specify multiple CA on server side using ca file ?

All comments and questions related to the functionality of the OpenVPN web pages and forum should go here.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Post Reply
tushar.sharma
OpenVPN Power User
Posts: 58
Joined: Fri Oct 07, 2011 12:23 pm
Location: Pune
Contact:

howto specify multiple CA on server side using ca file ?

Post by tushar.sharma » Fri Feb 03, 2012 11:25 am

Hello All,

how can we specify multiple ca's on server side config using ca file parameters. ?

I dont know in advance which CA has signed particular client certificate so how can we specify list
of certificates ? i have all certificates in one directory ?

User avatar
janjust
Forum Team
Posts: 2703
Joined: Fri Aug 20, 2010 2:57 pm
Location: Amsterdam
Contact:

Re: howto specify multiple CA on server side using ca file ?

Post by janjust » Fri Feb 03, 2012 12:47 pm

you can either concatenate different CAs in one big file and use that , e.g.

Code: Select all

cat ca1.crt ca2.crt > ca-stack.pem
or you can use the '--capath' option; in that case you need to properly set up a capath directory.

tushar.sharma
OpenVPN Power User
Posts: 58
Joined: Fri Oct 07, 2011 12:23 pm
Location: Pune
Contact:

Re: howto specify multiple CA on server side using ca file ?

Post by tushar.sharma » Sat Feb 04, 2012 4:40 am

Yeah its working When I am concatenating. ...

But how to set that capath i didn't got that ..

Thanks for Help


Tushar Sharma

Post Reply