User Tools

Site Tools


pfsense:certificates:revoke_certificate

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
pfsense:certificates:revoke_certificate [2021/02/18 18:42] peterpfsense:certificates:revoke_certificate [2021/02/19 10:08] (current) – [Checking the logs] peter
Line 132: Line 132:
  
 Try to connect using the VPN client. Try to connect using the VPN client.
 +
 +This should fails.
 +
 +==== Checking the logs ====
 +
 +Navigate to **Status -> System Logs -> OpenVPN**.
 +
 +<code>
 +...
 +Feb 19 09:46:24 openvpn 2000 192.168.1.102:48212 VERIFY ERROR: depth=0, error=certificate revoked: C=JE, L=St. Helier, O=ShareWiz, CN=peter
 +Feb 19 09:46:24 openvpn 2000 192.168.1.102:48212 OpenSSL: error:14089086:SSL routines:ssl3_get_client_certificate:certificate verify failed
 +Feb 19 09:46:24 openvpn 2000 192.168.1.102:48212 TLS_ERROR: BIO read tls_read_plaintext error
 +Feb 19 09:46:24 openvpn 2000 192.168.1.102:48212 TLS Error: TLS object -> incoming plaintext read error
 +Feb 19 09:46:24 openvpn 2000 192.168.1.102:48212 TLS Error: TLS handshake failed
 +Feb 19 09:47:01 openvpn 2000 192.168.1.102:52702 VERIFY ERROR: depth=0, error=certificate revoked: C=JE, L=St. Helier, O=ShareWiz, CN=peter
 +Feb 19 09:47:01 openvpn 2000 192.168.1.102:52702 OpenSSL: error:14089086:SSL routines:ssl3_get_client_certificate:certificate verify failed
 +Feb 19 09:47:01 openvpn 2000 192.168.1.102:52702 TLS_ERROR: BIO read tls_read_plaintext error
 +Feb 19 09:47:01 openvpn 2000 192.168.1.102:52702 TLS Error: TLS object -> incoming plaintext read error
 +Feb 19 09:47:01 openvpn 2000 192.168.1.102:52702 TLS Error: TLS handshake failed 
 +...
 +</code>
 +
 +<WRAP info>
 +**NOTE:** The log shows the certificate verification failed due to certificate revoked
 +</WRAP>
 +
  
 ---- ----
pfsense/certificates/revoke_certificate.1613673744.txt.gz · Last modified: 2021/02/18 18:42 by peter

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki