[Nottingham] Checking cert chains and configuring OpenSSL

[Martin]

On 30/10/18 18:56, Jason Irwin via Nottingham wrote:
> On 30/10/2018 17:35, Jason Irwin wrote:
>> Fundamentally I cannot figure out where I (or the guide) are wrong.
> The openvpn file provided in the OpenWRT wiki did not have "Option ca /path/to/file"
> As soon as I added that, things started to work.
> 
> Not sure if having that option is a good idea or not...

Mmmmm... I've always run openVPN using self-signed certificates. No CA
needed...

Can (securely) compare configs if useful?


(And nope, commercial Certificate Authorities cannot be trusted, as has
been repeatedly exposed... Just a small matter of business and money and
greed?)

Cheers,
Martin