Re: [Openvpn-users] Migrating to new CA

2023-10-03 Thread Selva Nair
Hi, > think I am getting closer with the "one step" process with an > intermediary cert. I am able to start up the server with both the new CA > signed server cert and the intermediary as outlined in "Step 3" above. > However, its like the server is not sending two server certs to the > connectin

Re: [Openvpn-users] Migrating to new CA

2023-10-03 Thread Gert Doering
Hi, On Tue, Oct 03, 2023 at 12:47:31PM -0400, mike tancsa wrote: > Thanks, thats a good question about the clients, at some point I plan to do > a survey to see what exactly is out in the field! Have a look at your server logs... with (at least) verb 3, you can see all the details in form of IV_

Re: [Openvpn-users] Migrating to new CA

2023-10-03 Thread mike tancsa
On 10/2/2023 3:59 PM, Selva Nair wrote: On Mon, Oct 2, 2023 at 3:00 PM mike tancsa wrote: I am in a position where I want to start migrating users away from my old CA which will expire in the medium term future to a new CA. I have many endpoint and cant just   "OK, everyone do

Re: [Openvpn-users] Migrating to new CA

2023-10-03 Thread mike tancsa
On 10/2/2023 4:42 PM, Jochen Bern wrote: On 02.10.23 22:21, mike tancsa wrote: If I have to go for option A (Stacked CAs on all clients, stacked CAs on the server then update the server), is there a downside with leaving an expired CA cert on all the clients ? Or can they just be left there un

Re: [Openvpn-users] .configure-Errors

2023-10-03 Thread Gert Doering
Hi, On Thu, Sep 14, 2023 at 11:48:46AM +0200, toml wrote: > Good morning > > I am facing a big problem, which I have also found quite a few times on > the web - exactly the same. But unfortunately I could not find a > solution anywhere. > > Does anyone have a tip for me how to do it correctly?