OpenVPN issues with certificates

[andro_b]

Cannot get OpenVPN client running. Logfile shows:

Warning   openvpn   WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.

The link has no useful information.

Also, why are the 'i' buttons greyed out and nonfunctional in the cryptographic area of the setup? [I don't seem to be able to easily include an image.]

[bartjsmit]

Old but still good: https://www.kirkg.us/building-an-openvpn-server-with-opnsense/

Bart...

[franco]

> Also, why are the 'i' buttons greyed out and nonfunctional in the cryptographic area of the setup?

Because these are either self-explanatory for the task at hand or would take books to write in terms of adding help labels here... Just match the server settings and you are fine.


Cheers,
Franco

[andro_b]

Old but still good: https://www.kirkg.us/building-an-openvpn-server-with-opnsense/

Thanks but that set of instructions is for a server not a client. I have a remote OpenVPN server set up OK on a remote pfsense system, but the opnsense client wont connect.

I cant see where to add a setting for enabling a server certificate verification method, which is the error.

[Fright]

but the opnsense client wont connect.

"WARNING: No server certificate verification method has been enabled"
its a warning, not an error. connection should be made imho
there should be another reason

server certificate verification method, which is the error.

although remote-cert-tls option might be useful, it only checks for certificate extensions