-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

this is a wild stab in the dark .. but

perhaps the CRL is associated with a different CA to the --ca loaded by the 
server ?

BR


Sent with Proton Mail secure email.

------- Original Message -------
On Saturday, June 17th, 2023 at 13:37, Ralf Hildebrandt via Openvpn-users 
<openvpn-users@lists.sourceforge.net> wrote:


> > This is from the working connection - so it's "just log noise", it seems,
> > not causing an actual session abort.
> 
> 
> Good!
> 
> > My gut feeling is that there is some garbage at the end of the CRL file,
> > so OpenSSL is able to read "loaded 1 CRLs" from the file, and then there is
> > something more, which confuses OpenSSL - but not enough to reject the
> > session.
> 
> 
> Attached is the actual crl file in PEM format.
> 
> --
> Ralf Hildebrandt
> Charité - Universitätsmedizin Berlin
> Geschäftsbereich IT | Abteilung Netzwerk
> 
> Campus Benjamin Franklin (CBF)
> Haus I | 1. OG | Raum 105
> Hindenburgdamm 30 | D-12203 Berlin
> 
> Tel. +49 30 450 570 155
> ralf.hildebra...@charite.de
> https://www.charite.de
> _______________________________________________
> Openvpn-users mailing list
> Openvpn-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
-----BEGIN PGP SIGNATURE-----
Version: ProtonMail

wsBzBAEBCAAnBYJkja6BCZBPl5z2a5C4nRYhBAm8PURno41yecVVVU+XnPZr
kLidAADnzQf/RNWByhMO2UoaGfIf/Asw2Uukn/W3vnd/Pf4gd+dFHkReROkD
K4/MxG/dMvffuK1vhreneBRpJP5hk3h7Xqq3LgthkkBIU+80/8CNSMTw3Dd8
6DxdvQB9CFhKoR2N4wH10qGjCEPTyq6rHMMiaxOvyMghcEk7YYdOXcybu0zm
BSgf/P6m4cI9RfB9LrpttFhBa7o0ebyNR5uppWY60bGbQuAdcwMjo6/xOrSz
yCPtzkG9Z5QFT4m/96okcLbe7mkkOFKYUA5zlwXAdLheRDDJFZTXRD1FXKT6
4GMawM/2jBeaxh8X/jnUL4tFAoFO9LJfR1QO0pF3g+JyGcL5UBrWDA==
=g6/L
-----END PGP SIGNATURE-----

Attachment: publickey - tincantech@protonmail.com - 0x09BC3D44.asc
Description: application/pgp-keys

Attachment: publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig
Description: PGP signature

_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to