[Openvpn-devel] openvpn-2.1.0-r1: easy-rsa tools creates broken client CERTs unusable for TLS

2010-05-17 Thread Martin Mokrejs
Hi, I think the easy-rsa/openssl.cnf file should be modified so thet client CERTs would match current openVPN expectations. Please see my bug report at http://bugs.gentoo.org/show_bug.cgi?id=320171 . For convenience, I am attaching the patch here. Did I get it right what has to be done? Would som

Re: [Openvpn-devel] openvpn-2.1.0-r1: easy-rsa tools creates broken client CERTs unusable for TLS

2010-06-08 Thread Martin Mokrejs
rceforge.net/mail/?group_id=48978> > > All the best, > > -- Samuli Seppänen Community Manager OpenVPN Technologies, Inc irc freenode > net: mattock > Martin Mokrejs wrote: >> Hi, >> I think the easy-rsa/openssl.cnf file should be modified so thet client >

Re: [Openvpn-devel] openvpn-2.1.0-r1: easy-rsa tools creates broken client CERTs unusable for TLS

2010-06-09 Thread Martin Mokrejs
Hi, David Sommerseth wrote: > On 08/06/10 18:24, Martin Mokrejs wrote: >> Hi, >> I had a look into the original bug report I sent and the summary is this: >> at some version openvpn implemented a more strict check for certificate >> values and if teh cjeck fa

Re: [Openvpn-devel] openvpn-2.1.0-r1: easy-rsa tools creates broken client CERTs unusable for TLS

2010-06-09 Thread Martin Mokrejs
David Sommerseth wrote: > On 09/06/10 23:56, Martin MOKREJ` wrote: >> The patches in Gentoo I for example here: I use Gentoo, I believed that was a "typo" of Jan and did not comment on that. >> Please improve the openVPN docs. Further, isn't it possible to >> provide two openssl.cf files, one

Re: [Openvpn-devel] openvpn-2.1.0-r1: easy-rsa tools creates broken client CERTs unusable for TLS

2010-08-25 Thread Martin Mokrejs
gt; > client.conf: > > client > proto udp > remote openvpnserver > port 1194 > dev tun > nobind > ca /home/janjust/rsa-test/test-ca.crt > cert /home/janjust/rsa-test/client.crt > key /home/janjust/rsa-test/client.key > tls-auth /home/janjust/rsa-t

Re: [Openvpn-devel] openvpn-2.1.0-r1: easy-rsa tools creates broken client CERTs unusable for TLS

2010-09-23 Thread Martin Mokrejs
Martin Mokrejs wrote: > Hi Jan, > I am sorry for the long delay, I was away some days and then just overloaded > by other duties. I have increased the verbosity on both client and server. > I see some weird IP address on the server in the log: 94.112.118.14 is not > my physical