Netgate SG-8860 1U with pfSense 2.3.4 Cert Manager Import User vs Server

[donald.allen.austin]

I have imported a wildcard certificate that I am currently using on my web server with no problems, but when I try and use the cert on a openvpn server setup it wont let me saying that the server is a User cert and cannot be used. Does anyone have any idea why this is?

[jimp]

It doesn't prevent you from using those, it's not recommended, however. That means it's missing some property that the cert manager expects to see in a server certificate.

That said you DO NOT want to use a "real" trusted certificate for OpenVPN. That would let ANYONE with a certificate from that CA connect to your VPN, not just you. Which undoubtedly is NOT what you want. There is no advantage to using anything other than a self-signed CA/Cert structure for OpenVPN.