id summary reporter owner description type status priority milestone component version severity resolution keywords cc 199 Add option to ignore certificate verification errors caused by incorrect system time fredde-fisk "==== Background ==== When OpenVPN is running on embeded systems the hardware clock might be reset on reboot, and it's not always possible to synhcronize the system time using NTP. This will cause OpenVPN to reject the certificate with the following error: {{{ VERIFY ERROR: depth=1, error=certificate is not yet valid: ... }}} ==== Proposal ==== Add an option that makes verify_callback in ssl.c ignore the errors X509_V_ERR_CERT_NOT_YET_VALID and X509_V_ERR_CERT_HAS_EXPIRED " Feature Wish closed major Certificates OpenVPN git master branch (Community Ed) Not set (select this one, unless your'e a OpenVPN developer) wontfix