Re: [Openvpn-users] Created new OVPN server based on old, getting strange error message when connecting

2025-03-29 Thread David Sommerseth via Openvpn-users
On 29/03/2025 14:16, Bo Berglund wrote: [...snip...] > It seems like that solution is based on the clients being "registered" on the > server with a fingerprint created client side, but how can you do such things > on > a mobile phone? > So a Linux client would work but not a phone.. Kinda ... Th

Re: [Openvpn-users] Created new OVPN server based on old, getting strange error message when connecting

2025-03-29 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 First, thank you David, for your help. Also, see below for how Easy-RSA can help, however you choose to deploy your VPN. For OpenVPN peer-fingerprint mode: Please note, Easy-RSA 3.2.2 also has commands: `self-sign-server` and `self-sign-client`

[Openvpn-users] How to use easyrsa 3.2.2 on new server - questions

2025-03-29 Thread Bo Berglund
I am trying to understand how to use easyrsa 3.2.2 downloaded from github on a freshly built RPi4B running PiOS Lite in order to create an OpenVPN server for private use as described in a parallel thread. Now I have read the description document here: https://community.openvpn.net/openvpn/wiki/Eas

Re: [Openvpn-users] Created new OVPN server based on old, getting strange error message when connecting

2025-03-29 Thread Bo Berglund
On Sat, 29 Mar 2025 00:30:13 +0100, Bo Berglund wrote: >On Fri, 28 Mar 2025 18:09:16 -0400, "Dan Langille" wrote: > >> On my phone: I suspect you’re using a newer openvpn version. >> It is complaining about your CA. I think it wants a CA created with a newer >> algorithm. >> Wait for confirma

Re: [Openvpn-users] How to use easyrsa 3.2.2 on new server - questions

2025-03-29 Thread Bo Berglund
On Sat, 29 Mar 2025 10:41:38 +0100, Bo Berglund wrote: >I am trying to understand how to use easyrsa 3.2.2 downloaded from github on a >freshly built RPi4B running PiOS Lite in order to create an OpenVPN server for >private use as described in a parallel thread. > >Now I have read the description

Re: [Openvpn-users] Created new OVPN server based on old, getting strange error message when connecting

2025-03-29 Thread Bo Berglund
On Sat, 29 Mar 2025 12:56:01 +0100, Stefanie Leisestreichler wrote: >Hi Bo. >I would like to recommend another setup for your installation, without >all the implications coming with an own pki... >This is save and can be handled very simple: >https://github.com/OpenVPN/openvpn/blob/master/doc/ma

Re: [Openvpn-users] Created new OVPN server based on old, getting strange error message when connecting

2025-03-29 Thread Stefanie Leisestreichler
On 3/29/25 08:07, Bo Berglund wrote: On Sat, 29 Mar 2025 00:30:13 +0100, Bo Berglund wrote: On Fri, 28 Mar 2025 18:09:16 -0400, "Dan Langille" wrote: On my phone: I suspect you’re using a newer openvpn version. It is complaining about your CA. I think it wants a CA created with a newer a

Re: [Openvpn-users] How to use easyrsa 3.2.2 on new server - questions

2025-03-29 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Sat, 29 Mar 2025 10:41:38 +0100, Bo Berglund wrote: > >But I am struggling to understand the concepts still. Some help: https://github.com/OpenVPN/easy-rsa/blob/master/doc/Intro-To-PKI.md > >I tried the section I feel is most similar to my u