-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello Gert,
thanks for your hints and support. Resetting the server date works interestingly. So i do not have to drive through germany and find all clients .... *puhh!! Thanks a lot. Have a nice night at munich. Michael Am 09.03.14 18:37, schrieb Gert Doering: > HI, > > On Sun, Mar 09, 2014 at 03:29:31PM +0100, Michael Post wrote: >> openssl verify -CAfile ca_cert.pem -verbose >> clients/client-cert-MichaelPost.pem says that my client >> certificate is also expired. > > Oh, besides the suggestion I just sent (turn back the server clock) > - if that turns out to not work, what you *could* do - and this is > highly and strictly not recommended! - is to hack openvpn to ignore > cert failures, run that binary on the server until you have updated > all your clients, and then revert to a properly secure binary. > > *Do* *understand* *the* *risks* - if you take out certificate > verification, you'll quite likely permit anyone to connect to your > VPN. > > gert > -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCgAGBQJTHN3IAAoJEFF6fE6T32A8hQcIAK0V7cg8eGEdYt4vHvdq4vP8 GjaBRFBCVge+1S1j06jbJfORMVMZk88zuN8GOQQat6Tcb9/GLJwGqQ3aWsXpoewU 2EO5HZJqTowAL5/JsPkPEtBzaJVNRvy0j1M2iidI/rlMM9oH9299Sq6+uR7D6FYO zKZcGRWOZXLMPFXopWMhiNleONul5Pb6N4IMeM9n6gJJIVX6/EUTOvueVKTgxrU2 h521YYR6LkkCdTi1OXDWF7snJzbwZRcEYquXZ5lxPWtEgPRQ/Fs4GdFTeSzwmv/G VU0X49ETtn5Qo+fXdQbV7g3CoORvVd25fN8X2KEszkk2o+NK4ffPThsVQG+kA/o= =Cd1j -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Subversion Kills Productivity. Get off Subversion & Make the Move to Perforce. With Perforce, you get hassle-free workflows. Merge that actually works. Faster operations. Version large binaries. Built-in WAN optimization and the freedom to use Git, Perforce or both. Make the move to Perforce. http://pubads.g.doubleclick.net/gampad/clk?id=122218951&iu=/4140/ostg.clktrk _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
