From: James Y. <ji...@yo...> - 2004-06-15 00:20:53
|
Adam Pavelec <apa...@be...> said: > On Monday, June 14, 2004 4:26 PM [GMT-5=EST], Sam Dunham <sam...@im...> > wrote: > > > Actually, when I run the vars script, I still get the message that you > > have to define KEY_DIR. I ended up doing all the variable exports > > manually. > > Which attributes of the certs need to be the same; and which attributes need > to be different? > > I initially created certs for both the server and client with the exact same > parameters and received an error while creating the client cert (TXT_DB > error number 2), apparently because its attributes were identical to the > server's cert. > > Then I created a server key with a commonName of something like > 'OpenVPN-Server' and then used 'OpenVPN-Client' for the client's cert. > > When I test the connection using the custom-tailored sample configs from the > release notes, the TLS handshake fails, and the server spits out "Error: > Windows resource limit WSA_MAXIMUM_WAIT_EVENTS (64) has been exceeded" > errors while the client reports "TLS Error: Unroutable control packet > received from ip.address.of.server:port (si=3 op=P_CONTROL_V1)". The WSA_MAXIMUM_WAIT_EVENTS error is a real bug in beta4 and has been fixed in beta5. James |