nblom / openvpn-php Goto Github PK

openvpn fails to connect to self signed server certificate.

to fix, re issue the server cert like this:

Create a new csr for your server key

openssl req -new -key /usr/local/etc/openvpn/openvpn-server.key -text -out /usr/local/etc/openvpn/openvpn-server.csr


Move your existing server certificate, in case something goes wrong you can rollback:

mv /usr/local/etc/openvpn/openvpn-server.crt /usr/local/etc/openvpn/openvpn-server-org.crt


Change working directory

cd /usr/local/www/apache24/data/


Create a new server cert based on the new csr, with the correct extensions. You use the password for the CA/site when asked.

openssl ca -config openssl.cnf -in /usr/local/etc/openvpn/openvpn-server.csr -out /usr/local/etc/openvpn/openvpn-server.crt -extensions server


Verify that the server cert has Netscape Cert Type: SSL Server, and X509v3 Extended Key Usage: TLS Web Server Authentication

openssl x509 -in /usr/local/etc/openvpn/openvpn-server.crt -text -noout


Just restart openvpn after new cert.

/usr/local/etc/rc.d/openvpn restart


Until someone have time to translate it.