OpenVPN CLient Export fails with "Certificate does not belong to server CA"

[SchengFui]

Hi there,

in OPNsense 26.7.1_1, OpenVPN Client Export fails with "Certificate does not belong to server CA"

Same export within Version 26.1 worked without problems, the Server-Configuration was not changed between 26.1 and 26.7

A newly created, second server-config (using instances and newly created ca) throws same error message when trying to export.

any ideas?

Thank you.

[Monviech (Cedrik)]

I just tested the export and it works for me.

Maybe you are doing something wrong with your certificates?

Try using openssl on the command line to check if your CA and your Leaf certificates are correctly issued.