[OpenVPN] Doubt about certificates

RouterOS General
1

Hi to all, I followed OpenVPN guide found on Wiki.

I created certificates:

  • client.crt
  • client.pem
  • ca.crt
    then imported on client.

Client configuration, Dial Out tab:
user: VPN_client
password: client_test
profile: default

About certificate, on wiki example it’s reported “vpngate-client”.. from where!?!?!?
On my client I only have these options:

  • none
  • ca.crt_0
  • client.crt_0



    On server side, secret for client:
    name: VPN_client
    password: client_test

About profile I have these options:

  • VPN_profile
  • default


    Here: on client side I can set none or client.crt_0 with no changes, same way for server side selecting VPN_profile or default.
    Why this? Are my settings wrong?
    Thanks.
2

On Wiki example I can find:

/interface ovpn-server server
set […] > require-client-certificate=no

This configuration is working.
If I enable client-certificate on server log I can see:

[OVPN]: <95.244.yyy.xxx>: disconnected

So what’s wrong?
Something wrong during certificates creation?
Thanks.

3

I had a functional ovpn setup, but for a few months I got the same error with TLS fail.
I don’t know why or if there was a change in the certificate verification side on routeros, but all my remote servers are not accessible anymore.

I have made a post about it there.

4

My issue has been solved with the 6.47 update.