Re: OpenSSL: error:0308010C:digital envelope routines::unsupported while reading CRL
Antonio Quartulli <[email protected]>
| Newsgroups | gmane.network.openvpn.user |
|---|---|
| Message-ID | <[email protected]> |
Hi, On 01/12/2023 10:34, Aleksandar Ivanisevic wrote: > Well, what do you know, it worked! No more error with the identical config. > > I will leave it like this (i.e. systemd unit WorkingDirectory pointing > to config dir and nothing in /etc/openvpn/server/) since this is a much > cleaner solution, i.e. no symlinks and I don’t have to reference full > paths everywhere so the config file look a bit less scary ;) > > If anyone wants to investigate further why would symlinking the main > config file behave differently than pointing to it directly, I can help > with testing. > > Thank you Antonio for useful hints. I am glad you got it working! My money is still on "there are two CRLs and for whatever reason openvpn is opening one first and then the other". Not sure how yet. I quickly tested passing a symlink to --crl-verify and it just worked as expected. So the symlink alone is not at fault here. Anyway, at least we know it's something obscure in the environment and most likely (hopefully) not a bug in the code. Cheers! -- Antonio Quartulli _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users