Recently I could not connect anymore to any of my routers from my Win 10 OpenVPN.
I got on the Windows10 OpenVPN log: OpenSSL: error:14094415:SSL routines:ssl3_read_bytes:sslv3 alert certificate expired
On the router I got a an error: duplicate packet, dropping.
All my routers are configured with a master CA, a sub CA for each router, and a set of certificates under the sub CA for the router and different clients. All CA have a CRL path defined in their certs.
All the CA, sub CA, clients and server certs are still within their validity period and the crl of both CA are also current.
I checked on the windows client that the CA, sub CA and clients have a valid chain of trust and the current crl for both CA are also current.
On the routers I have also both CA and subCA shown as T(rusted) with also a valid crl (shown as -D in certificate crl print with proper date).
I tried also to connect from Mikrotik to Mikrotik with ovpn without success.
I tried an iOS OpenVPN connection that was working previously but not anymore.
I can still log to the router via a backup ikeV2 remote access that I had fortunately setup.
But I am dumbfounded by this Openvpn problem. Was there some changes recently on the OpenVPN implementation in RouterOS that could explain this problem? Any pointers what to look for to solve my problem?