HI, On Sun, Mar 09, 2014 at 03:29:31PM +0100, Michael Post wrote: > openssl verify -CAfile ca_cert.pem -verbose > clients/client-cert-MichaelPost.pem says that my client certificate is > also expired.
Oh, besides the suggestion I just sent (turn back the server clock) - if
that turns out to not work, what you *could* do - and this is highly and
strictly not recommended! - is to hack openvpn to ignore cert failures,
run that binary on the server until you have updated all your clients, and
then revert to a properly secure binary.
*Do* *understand* *the* *risks* - if you take out certificate verification,
you'll quite likely permit anyone to connect to your VPN.
gert
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany [email protected]
fax: +49-89-35655025 [email protected]
pgpG2cIkKhdnV.pgp
Description: PGP signature
------------------------------------------------------------------------------ Subversion Kills Productivity. Get off Subversion & Make the Move to Perforce. With Perforce, you get hassle-free workflows. Merge that actually works. Faster operations. Version large binaries. Built-in WAN optimization and the freedom to use Git, Perforce or both. Make the move to Perforce. http://pubads.g.doubleclick.net/gampad/clk?id=122218951&iu=/4140/ostg.clktrk
_______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
