Hi Erich,

On 09/04/14 19:51, Erich Titl wrote:
> Hi JJK
>
> at 09.04.2014 12:32, Jan Just Keijser wrote:
>> Hi Erich,  the client pkcs12 file does not include the CA cert (or I 
>> cannot extract them). I also cannot extract any public data from the 
>> server pkcs12 file. Can you extract the public certs for me?
>>
>
> Damn, there is a slider in the file format selection and I did not 
> include the CA cert. Sorry for the bloody noise
>
> Still... the error message is bogus.
>
glad to hear that this has been resolved. I agree that the error message 
is bogus, but this is what you get back from OpenSSL - and it's quite 
hard to tell whether this is due to a missing CA cert, an untrusted CA 
cert or whether it is simply a self-signed certificate. I guess it could 
be added as an extended check but it's not something you'd want to do 
for every client connecting to a server.

cheers,

JJK

PS CC'ing in openvpn-users so that the thread can be considered "closed"



------------------------------------------------------------------------------
Put Bad Developers to Shame
Dominate Development with Jenkins Continuous Integration
Continuously Automate Build, Test & Deployment 
Start a new project now. Try Jenkins in the cloud.
http://p.sf.net/sfu/13600_Cloudbees
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to