id summary reporter owner description type status priority milestone component version severity resolution keywords cc 204 "nsCertType not set to ""client"" for a client cert" zmi Eric Crist "For better security, I set this in the server config: ns-cert-type client But then I got an error about my client cert: VERIFY nsCertType ERROR: C=AT, ST=NOE, L=Korneuburg, O=Proteger, OU=IT, CN=itm-zmibook3, name=Michael Monnerie, emailAddress=hostmaster@zmi.at, require nsCertType=CLIENT And this was because the cert generated for my client was not set to cert-type client. This is fixed simply with a one liner for easy-rsa/2.0/openssl-0.9.8.cnf: # diff openssl-0.9.8.cnf /tmp/openssl-0.9.8.cnf 182a183,184 > # ZMI 20120424 > nsCertType = client Now I can enable ""ns-cert-type client"" on the server side. This is for version openvpn-2.3-alpha1" Bug / Defect closed trivial RC 2.3 Certificates OpenVPN 2.3-beta / 2.3-RC (Community Ed) Not set (select this one, unless your'e a OpenVPN developer) notabug nsCertType, client, openssl.cnf