Bug#885581: building with openssl 1.1 breaks existing setups ("VERIFY ERROR: depth=1, error=unsupported certificate purpose")

2017-12-29 Thread Bernhard Schmidt
Control: forwarded -1 https://community.openvpn.net/openvpn/ticket/970 On 28.12.2017 11:12, Andras Korn wrote: Hello Andras, > I have a PKI generated using certtool from the gnutls package. It's been > working fine with OpenVPN for years, up to with version 2.4.4-1. Thanks, I've forwarded

Bug#885581: building with openssl 1.1 breaks existing setups ("VERIFY ERROR: depth=1, error=unsupported certificate purpose")

2017-12-28 Thread Andras Korn
Package: openvpn Version: 2.4.4-2 Severity: important Hi, I have a PKI generated using certtool from the gnutls package. It's been working fine with OpenVPN for years, up to with version 2.4.4-1. With 2.4.4-2, it no longer does; the client complains that: 2017-12-28 10:19:51.581535500 Thu Dec