Home

Common problems/solutions:

Problem

OpenVPN starts with the error WARNING: Your certificate has expired! and no client is able to connect.

Solution

1. Verify that the hostname certificate hasn't expired yet

cat /etc/openvpn/pki/issued/your-host-name.crt | openssl x509 -noout -dates

If the hostname certificate has expired

mv /etc/openvpn/pki/reqs/your-host-name.com.req your-host-name.com.req.backup
mv /etc/openvpn/pki/private/your-host-name.com.key your-host-name.com.key.backup
mv /etc/openvpn/pki/issued/your-host-name.com.crt your-host-name.com.crt.backup

cd /etc/openvpn 
easyrsa build-server-full your-host-name.com nopass

Note: this should be executed inside the server container

Then restart the container

2. Verify that the CA hasn't expired yet

cat /etc/openvpn/pki/ca.crt | openssl x509 -noout -dates

If the CA certificate has expired you will need to generate a new CA a regenerate client certificates.