i use openvpn-2.1_rc1-install.exe made ca and server sertefikate, but got error Certificate does not have key usage extension when trying to do remote-cert-tls server in client
solution: in file easy-rsa/openssl.cnf section [ server ] i have to add 2 lines: - extendedKeyUsage=serverAuth keyUsage = digitalSignature, keyEncipherment - then remake certefikates. and after it everything is fine. unix version is fine.