# OpenVPN client configuration

**URL:** <https://community.ipfire.org/t/openvpn-client-configuration/1878>\
**Category:** Security\
**Created:** [9 April 2020 01:29 UTC](https://community.ipfire.org/t/openvpn-client-configuration/1878 "2020-04-09T01:29:15Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![dejan](https://community.ipfire.org/user_avatar/community.ipfire.org/dejan/32/15440_2.png) [@dejan](https://community.ipfire.org/u/dejan)\
**Post date:** [9 April 2020 15:34 UTC](https://community.ipfire.org/t/openvpn-client-configuration/1878/3 "2020-04-09T15:34:44Z")

</div>

Thanks Eric,

Sorry, maybe I did not explain the issue correctly. Everything works on the server side and the packages get imported on the client side. When connecting however, the client fails to validate the server certificate because it doesn’t infer the CA certificate from the configuration.

I just tested with a configuration without a password and the resulting configuration included the CA certificate, but this could be the case even in the case the private key in the PKCS12 file is password protected - I’ll try to find out where in the code this happens and I’ll try to submit a patch for it.

---

_[View the full topic](https://community.ipfire.org/t/openvpn-client-configuration/1878)._
