[Nottingham] Checking cert chains and configuring OpenSSL

Martin martin at ml1.co.uk
Wed Oct 31 20:48:53 UTC 2018

On 30/10/18 18:56, Jason Irwin via Nottingham wrote:
> On 30/10/2018 17:35, Jason Irwin wrote:
>> Fundamentally I cannot figure out where I (or the guide) are wrong.
> The openvpn file provided in the OpenWRT wiki did not have "Option ca /path/to/file"
> As soon as I added that, things started to work.
> Not sure if having that option is a good idea or not...

Mmmmm... I've always run openVPN using self-signed certificates. No CA

Can (securely) compare configs if useful?

(And nope, commercial Certificate Authorities cannot be trusted, as has
been repeatedly exposed... Just a small matter of business and money and


More information about the Nottingham mailing list