OPNsense Forum

Archive => 18.1 Legacy Series => Topic started by: unixpgmr on July 04, 2018, 06:40:13 pm

Title: OpenVPN log warning
Post by: unixpgmr on July 04, 2018, 06:40:13 pm
I am getting the following warning in my OpenVPN log file:
Code: [Select]
openvpn[48501]: WARNING: POTENTIALLY DANGEROUS OPTION --verify-client-cert none|optional
(or --client-cert-not-required) may accept clients which do not present a certificate
I can't find a place in the server setting to require the client certificate.  How do I fix this? 

Thank you in advance for your help
Title: Re: OpenVPN log warning
Post by: bartjsmit on July 04, 2018, 06:47:46 pm
Change your server mode to include '(SSL/TLS)' in VPN: OpenVPN: Servers.

You will need to set up a PKI and update your client OVPN profile(s).

Bart...