Hello,
I am struggling to make an OpenVPN server on a MikroTik router, I won’t say anything about the hardware or software versions because it’s a new model and has plenty of those.
What I want to say is:
- By any chance, in the future, can you make a drop down for “Usage” of a certificate? This drosepdown can have options like “OpenVPN” “IPsec” “etc1” “etc2”
- when you select OpenVPN, a javascript should check (or auto-select) what are the key usage scenarios need for this certificate
- because I made 3 sets of certificates (CA,server,client) and I did not connect as a OpenVPN client to this server due to certificate issues.
- first set was made for 10 years, valid from 1970 to 1980
- guys, if you don’t update time automatically when router is connected to the internet, at least throw a notice when creating certificate “morron! this certificate is valid from 1970 to 1980, are you sure you want to continue?”
- second set was with a good date, after updating time in MkroTik router, but key-agreement was missing from the certificate key usage scenarios.
- went to OpenVPN website and found a table explaining what certificate server needs to have an certificate client needs to have
- link: https://openvpn.net/community-resources/how-to/#mitm
- I working on the third certificate, now.
- Thank you for these good products you make!
Have a good day!
Paul@YateBTS