I think I did mention that this 'provider' is from the companies pfSense firewall.  So there is no actual, like 3rd party provider or anything.  And Windows works perfectly with this exact .ovpn.. 

Not sure how I can provide you with an 'actual' test case other than providing logs from a successful connection, however as stated that'd be from Windows.  Not Linux.

You are giving off a vibe that makes me think, that you think that Im trying to waste your time.  I can assure you, I'm not because that' d be wasting my own time as well and that is something I hate.  tell me what other info would help this and I'll do my damndest to provide it.

On Sat, Feb 18, 2017 at 2:05 PM, Ed Greshko <ed.greshko@greshko.com> wrote:
On 02/18/17 23:37, InvalidPath wrote:

> Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: VERIFY ERROR:
> depth=0, error=certificate signature failure: C=US, ST=MT,
> O=$organization, OU=Operations, CN=xxxx-v
> Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: OpenSSL:
> error:14090086:SSL routines:ssl3_get_server_certificate:certificate
> verify failed
> Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: TLS_ERROR: BIO
> read tls_read_plaintext error
> Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: TLS Error: TLS
> object -> incoming plaintext read error
> Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: TLS Error: TLS
> handshake failed
> Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]:
> SIGUSR1[soft,tls-error] received, process restarting
>
> Which is even more confusing because this config file works perfectly
> with the Windows OpenVPN client. So there must be some difference in
> how the clients use this file because teh certificate is valid.  I did
> goto the link in this error log and it's really not much help since
> the server certificate and actually the entire config was generated
> from pfSense.


This does appear to be the root of the problem.   That is, problem with
the certs.

Sorry, without knowing who the VPN Provider is and without having an
actual test case with real information to work with it would just be a
guessing game for me.   I'm not particularly fond of guessing games.

--
Fedora Users List - The place to go to get others to do the work for you
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-leave@lists.fedoraproject.org