Can't start OpenVPN server due to Certificate

Joined
Nov 12, 2022
Messages
6
Hi

I'm trying to set up the openvpn server on TrueNAS-SCALE-22.02.4 and am stuck...
Created a root CA directly on TrueNAS, generated a CSR with the Openvpn Server Certificate profile and signed it using the CA.
When I then try to use that certificate for the Openvpn server, it throws this error:
Server certificate must have "TLS Web Server Authentication" set in ExtendedKeyUsage extension.
1669747640253.png


When checking the CSR creation process to look for anything of the sort, I can't find what I need to change in order to make this work.
I added the usages which seem reasonable, especially ANY_EXTENDED_KEY_USAGE.
1669748166411.png


One would assume that one specific extended key usage is part of the any extended key usage, but apparently not.
Anyone have an idea what I'm doing wrong/what I need to set here to make it work?
Docs don't go into details on that, unfortunately.
 
Top