Hi, On Mon, Nov 27, 2023 at 10:47:17AM +0100, Aleksandar Ivanisevic wrote: > 2023-11-26T08:33:40.015885+01:00 xxx openvpn[7996]: xxx:6013 OpenSSL: > error:0308010C:digital envelope routines::unsupported
So this sounds like "the CRL is built using old algorithms" (MD5?), and
it might work if you do "providers legacy default" in the server config.
> 2023-11-26T08:33:40.016558+01:00 xxx openvpn[7996]: xxx:6013 OpenSSL:
> error:0480006C:PEM routines::no start line
> 2023-11-26T08:33:40.017053+01:00 xxx openvpn[7996]: xxx:6013 CRL: cannot read
> CRL from file /config/vpn/my.crl
> 2023-11-26T08:33:40.017486+01:00 xxx openvpn[7996]: xxx:6013 CRL: loaded 1
> CRLs from file /config/vpn/my.crl
Now *this* sounds like OpenVPN is lying, which would be a serious bug...
Can't test this right now (whether it's actually loading it by magic,
after OpenSSL told it "nah, this file is unsupported") or what is happening
there.
gert
--
"If was one thing all people took for granted, was conviction that if you
feed honest figures into a computer, honest figures come out. Never doubted
it myself till I met a computer with a sense of humor."
Robert A. Heinlein, The Moon is a Harsh Mistress
Gert Doering - Munich, Germany g...@greenie.muc.de
signature.asc
Description: PGP signature
_______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
