On 8/30/23 07:06, Gert Doering wrote:
Hi,
On Wed, Aug 30, 2023 at 01:53:40PM +0000, Jason Long via Openvpn-users wrote:
Thank you so much for your reply.
As I understand, The "ca.crt" and "ta.crt" keys are mandatory. I disabled the
"ta.crt" in Client.ovpn file and I got the following error:
ta.crt is outside the "basic" TLS handshake, so a different thing - and
if used, must be used on both sides.
Shouldn't that be *ta.key*, not *ta.crt* ? I have never seen a ta.crt in
all my years using OpenVPN. I have always known it to be a key file
rather than a certificate. Searching online the only occurrences that I
can find are random forums/SO/etc posts by people that may have mistyped
or copied from another post; scanning through `man openvpn` I could not
find any mention of a tls certificate as well, just keys.
--
blz
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users