Page 1 of 1

OVPN

Posted: Mon Apr 23, 2012 8:54 am
by ferdinandbabst
Hi All

I have a mikrotik RB1100 in our head office with OVPN server enabled. I have various 411UAHR routerboards that I use for my remote networks and the management thereof. I want to create Open-VPN tunnels to my head office. I will do this by connecting via 3G from the 411UAHR boards to the headoffice's RB1100 on Static Public IP.

I have used the Open-VPN application (www.openvpn.net) to create the certificates to be used. The App creates a Server.crt Server.key and CA.crt I can succesfully connect to the mikrotik from my PC with OpenVPN app by using the CA.crt.
When i Import only the CA.crt on the 411uahr I get "QR" next to the certificate but the OVPN client cannot use the certificate to connect. I keep on getting message "Certificate invalid".Which ".key" file must I use to get the "KR" status on the client 411uahr routerboard? Surely not the server.key or what?

What am I doing wrong?

Re: OVPN

Posted: Mon Apr 23, 2012 5:30 pm
by jandafields
Hi All

I have a mikrotik RB1100 in our head office with OVPN server enabled. I have various 411UAHR routerboards that I use for my remote networks and the management thereof. I want to create Open-VPN tunnels to my head office. I will do this by connecting via 3G from the 411UAHR boards to the headoffice's RB1100 on Static Public IP.

I have used the Open-VPN application (http://www.openvpn.net) to create the certificates to be used. The App creates a Server.crt Server.key and CA.crt I can succesfully connect to the mikrotik from my PC with OpenVPN app by using the CA.crt.
When i Import only the CA.crt on the 411uahr I get "QR" next to the certificate but the OVPN client cannot use the certificate to connect. I keep on getting message "Certificate invalid".Which ".key" file must I use to get the "KR" status on the client 411uahr routerboard? Surely not the server.key or what?

What am I doing wrong?
This walks you through the exact process. Also, make note of the CA requirements for OVPN at the very bottom.

http://wiki.mikrotik.com/wiki/Manual:Cr ... rtificates