|
|
Vladimir Ilic <vladojko@xxxxxxxxx> said: > Hello, > > I am trying to use tls_serial_0 or tls_serial_1 enviroment variables in the > verify_tls script, but they are always set to -1 for all certificates I use. I > guess this is coming from the function in the ssl libraries which gives back > serial number of the certificate (X509_get_serialNumber). However, > certificates I am using are perfectly correct, signed by Verisign, and OpenVPN > can authenticate clients using this certificates, so I guess there could be > some little bug in OpenVPN or OpenSSL? Are you specifying Verisign's certificate chain in the "ca" option? OpenVPN is not hardcoded (unlike web browsers) with any public CA root certificates, so make sure you specify them. James ____________________________________________ Openvpn-users mailing list Openvpn-users@xxxxxxxxxxxxxxxxxxxxx https://lists.sourceforge.net/lists/listinfo/openvpn-users |