Re: OpenSSL: error:0308010C:digital envelope routines::unsupported while reading CRL

Hi,

On 28/11/2023 10:53, Aleksandar Ivanisevic wrote:
> Anyway, I’ve sent the complete file to Antonio, so you can check.

Just tested here and I got no error:

2023-11-28 15:01:34 us=767852 OpenVPN 2.7_git 
[git:master/a1cb1b47b138b9f6] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] 
[LZ4] [EPOLL] [MH/PKTINFO] [AEAD] [DCO] built on Nov 28 2023
2023-11-28 15:01:34 us=767885 library versions: OpenSSL 3.0.11 19 Sep 
2023, LZO 2.10
2023-11-28 15:01:34 us=767922 DCO version: N/A
2023-11-28 15:01:34 us=767987 WARNING: --keepalive option is missing 
from server config
2023-11-28 15:01:34 us=768002 net_route_v4_best_gw query: dst 0.0.0.0
2023-11-28 15:01:34 us=768098 net_route_v4_best_gw result: via 0.0.0.0 dev
2023-11-28 15:01:34 us=770152 Diffie-Hellman initialized with 2048 bit key
2023-11-28 15:01:34 us=772370 CRL: loaded 1 CRLs from file 
/home/ordex/2e.crl

Are you sure that you are not loading yet something else along with this 
CRL?
Like you verified, this CRL seems fine.

And my command line is as simple as:

openvpn --server 10.10.0.0 255.255.255.0 --dev tun --topology subnet 
--ca ../../test-pki/pki/ca.crt --cert 
../../test-pki/pki/issued/server.crt --key 
../../test-pki/pki/private/server.key --verb 4 --dh 
../../test-pki/pki/dh.pem --crl-verify /home/ordex/2e.crl

EXTRA NOTE: I tested master *and* v2.6.3 with the same result.


Regards,

> 
> regards,
> 
> _______________________________________________
> Openvpn-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/openvpn-users

-- 
Antonio Quartulli


_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users