Or you can generate a certificate which includes both clientAuth and serverAuth, it should also work.
On 01/27/2016 09:41 PM, Jan Just Keijser wrote: > Hi all, > > On 27/01/16 18:46, Joe Patterson wrote: > > I just tested it: yes it is possible to use the same certificate on both > side, BUT > you need to generate the certificate in a non-standard way; by default the > easy-rsa utilities will generate a "clientAuth" (build-key) or "serverAuth" > (build-key-server) certificate. This needs to be overruled by commenting out > 2 lines in openssl-1.0.0.cnf : > 191c191 > < #extendedKeyUsage=clientAuth > --- > > extendedKeyUsage=clientAuth > 217c217 > < #extendedKeyUsage=serverAuth > --- > > extendedKeyUsage=serverAuth > > > after that you can generate a new certificate that you can use at both ends. > Don't use "remote-cert-tls" and the likes , of course > > HTH, > > JJK > > > > > > > ------------------------------------------------------------------------------ > Site24x7 APM Insight: Get Deep Visibility into Application Performance > APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month > Monitor end-to-end web transactions and take corrective actions now > Troubleshoot faster and improve end-user experience. Signup Now! > http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140 > > > _______________________________________________ > Openvpn-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openvpn-users
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140
_______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
