ALT Linux sysadmins discussion
 help / color / mirror / Atom feed
From: Vladimir Karpinsky <vkarpinsky@mail.ru>
To: sysadmins@lists.altlinux.org
Subject: [Sysadmins] OpenVPN cert error
Date: Thu, 7 Jun 2018 23:10:18 +0300
Message-ID: <bbdcce99-7113-3241-53c3-6ad533de64b7@mail.ru> (raw)

Здравствуйте!

При обновлении виндового клиента OpenVPN до версии 2.4.6 он перестал 
подключаться с руганью:
OpenSSL: error:140AB18E:SSL routines:SSL_CTX_use_certificate:ca md too weak

На сервере (Альт p8) перегенерировал через альтератор сертификат, но 
безрезультатно. В /etc/openssl/openssl.cnf написано:

default_md      = sha256

М.б. альтератор откуда-то из другого места конфиг читает?

-- 
	С уважением,
		Владимир.


             reply	other threads:[~2018-06-07 20:10 UTC|newest]

Thread overview: 11+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2018-06-07 20:10 Vladimir Karpinsky [this message]
2018-06-07 20:27 ` Vladimir Karpinsky
2018-06-08  4:47 ` Nikolay A. Fetisov
2018-06-08  5:12   ` Vladimir Karpinsky
2018-06-08  6:59     ` Nikolay A. Fetisov
2018-06-08  8:47       ` Vladimir Karpinsky
2018-06-08  9:47         ` Konstantin Lepikhov
2018-06-08 12:01           ` Vladimir Karpinsky
2018-07-02 10:07         ` Sergey
2018-07-02 11:40           ` Nikolay A. Fetisov
2018-07-02 12:17             ` Sergey

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=bbdcce99-7113-3241-53c3-6ad533de64b7@mail.ru \
    --to=vkarpinsky@mail.ru \
    --cc=sysadmins@lists.altlinux.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

ALT Linux sysadmins discussion

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://lore.altlinux.org/sysadmins/0 sysadmins/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 sysadmins sysadmins/ http://lore.altlinux.org/sysadmins \
		sysadmins@lists.altlinux.org sysadmins@lists.altlinux.ru sysadmins@lists.altlinux.com
	public-inbox-index sysadmins

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://lore.altlinux.org/org.altlinux.lists.sysadmins


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git