From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <naf@naf.net.ru>
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
 sa.local.altlinux.org
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham
 autolearn_force=no version=3.4.1
X-Virus-Scanned: amavisd-new at localhost
Message-ID: <6324a70c403b679b2d74834e00026d7876a9c6f0.camel@naf.net.ru>
From: "Nikolay A. Fetisov" <naf@naf.net.ru>
To: ALT Linux sysadmins' discussion <sysadmins@lists.altlinux.org>
Date: Fri, 08 Jun 2018 09:59:06 +0300
In-Reply-To: <cddbfbbf-55bd-ede7-ecc7-032eb1a00705@mail.ru>
References: <bbdcce99-7113-3241-53c3-6ad533de64b7@mail.ru>
 <cdf7a4c7a9cd6815e4e4798873f3d01386208b00.camel@naf.net.ru>
 <cddbfbbf-55bd-ede7-ecc7-032eb1a00705@mail.ru>
Content-Type: text/plain; charset="KOI8-R"
X-Mailer: Evolution 3.28.2-alt1 
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
Subject: Re: [Sysadmins] OpenVPN cert error
X-BeenThere: sysadmins@lists.altlinux.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: naf@naf.net.ru,
 ALT Linux sysadmins' discussion <sysadmins@lists.altlinux.org>
List-Id: ALT Linux sysadmins' discussion <sysadmins.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/options/sysadmins>,
 <mailto:sysadmins-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/sysadmins>
List-Post: <mailto:sysadmins@lists.altlinux.org>
List-Help: <mailto:sysadmins-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/sysadmins>,
 <mailto:sysadmins-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Jun 2018 07:00:06 -0000
Archived-At: <http://lore.altlinux.org/sysadmins/6324a70c403b679b2d74834e00026d7876a9c6f0.camel@naf.net.ru/>
List-Archive: <http://lore.altlinux.org/sysadmins/>

В Пт, 08/06/2018 в 08:12 +0300, Vladimir Karpinsky пишет:
> 
> ....у меня теперь вылезает:
> 
> VERIFY ERROR: depth=0, error=CA signature digest algorithm too weak:
> C=RU, ...
> OpenSSL: error:1416F086:SSL 
> routines:tls_process_server_certificate:certificate verify failed
>  ...

А все сертификаты изменены? И CA перегенерирована? И сертификат CA
установлен?

-- 
С уважением,
Николай Фетисов