[Berlin-wireless] vpn zertifikat problem

[Stefan Sperling]

Hi,

Ich bekomme seit einiger Zeit folgendes Problem beim Aufbau der OpenVPN
Verbindung zum FFVPN:

Thu Mar  2 08:09:51 2017 us=556547 VERIFY ERROR: depth=0, error=self signed certificate: C=DE, ST=Eastern Germany, L=Berli
n, O=Foerderverein Freie Netzwerke e.V., OU=Freifunk, CN=77.87.48.10, emailAddress=sven-ola at gmx.de
Thu Mar  2 08:09:51 2017 us=558943 OpenSSL: error:14007086:SSL routines:CONNECT_CR_CERT:certificate verify failed

Wurde das Zertifikat auf dem Server ersetzt?

Ich habe hier folgendes CA Zertifikat.
Ist das Zertifikat des OpenVPN Servers mit diesem signiert? 

SHA1 Fingerprint=2A:EB:82:AD:B9:9A:E2:7C:F6:F4:54:CC:44:6A:88:7B:9A:18:A9:D1
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14190619348467371762 (0xc4ef351cc02ecef2)
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=DE, ST=Eastern Germany, L=Berlin, O=Foerderverein Freie Netzwerke e.V., OU=Freifunk, CN=77.87.48.10/emailAddress=sven-ola at gmx.de
        Validity
            Not Before: Nov 28 21:00:14 2012 GMT
            Not After : Nov 26 21:00:14 2022 GMT
        Subject: C=DE, ST=Eastern Germany, L=Berlin, O=Foerderverein Freie Netzwerke e.V., OU=Freifunk, CN=77.87.48.10/emailAddress=sven-ola at gmx.de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:b5:b7:ff:5c:ee:c0:2e:ff:b4:78:d1:b0:04:c5:
                    27:0d:4d:83:24:af:15:2f:e4:9d:8e:d5:54:e5:fb:
                    23:2d:cd:0b:41:96:56:16:37:12:94:a3:bd:a2:80:
                    a3:97:e3:bd:c3:76:d5:f6:91:45:19:a5:20:9f:7d:
                    95:09:37:50:a1:c9:30:e4:70:76:b1:78:0f:c4:f7:
                    3b:76:9f:eb:b5:a9:36:79:fb:f5:54:25:2e:4f:b1:
                    49:b1:8a:4f:da:c6:1a:b8:62:33:4c:09:b2:c8:c2:
                    55:c1:b1:bf:02:92:68:ba:41:a2:a9:83:e1:51:c0:
                    98:9d:ae:99:44:50:82:31:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                02:42:CC:B5:53:53:5B:0E:58:6F:DE:B2:AC:11:63:C6:F6:E0:A7:0D
            X509v3 Authority Key Identifier: 
                keyid:02:42:CC:B5:53:53:5B:0E:58:6F:DE:B2:AC:11:63:C6:F6:E0:A7:0D
                DirName:/C=DE/ST=Eastern Germany/L=Berlin/O=Foerderverein Freie Netzwerke e.V./OU=Freifunk/CN=77.87.48.10/emailAddress=sven-ola at gmx.de
                serial:C4:EF:35:1C:C0:2E:CE:F2

            X509v3 Basic Constraints: 
                CA:TRUE
    Signature Algorithm: sha1WithRSAEncryption
         b3:5b:89:d9:8e:66:05:28:b0:09:77:cf:bd:34:45:06:a0:94:
         61:e9:66:48:fb:4b:8c:ef:9c:b8:83:0e:01:5a:5e:88:f5:96:
         1c:b4:af:a5:79:d1:05:d9:a8:cd:d2:b7:ce:35:7e:a3:4b:01:
         31:02:a7:de:a1:ff:61:92:ed:c5:75:9b:9d:66:11:89:72:08:
         62:4c:fa:05:62:af:05:65:6b:f0:60:f7:b3:ba:d3:c4:c8:4e:
         fc:00:f5:81:87:dd:0e:a4:9f:49:57:91:14:92:e9:1c:5e:31:
         c0:5e:c6:b2:33:b0:56:bf:13:c3:b2:42:83:3b:6b:c0:0f:6a:
         f4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----