Using Internal CA / Self-Signed Certificate for OpenVPN client

[A Former User]

This post is deleted!

[jimp]

You're confusing site-to-site/remote access VPNs on pfSense (servers) with VPN service clients.

A VPN server on pfSense would use a server certificate from a self-signed internal CA as its server certificate.

A VPN client on pfSense would use a certificate provided by the server. If that's a VPN provider, the VPN provider would give you a certificate. (If it's something like PIA, that's up to them. If you are connecting to another pfSense, it would be a user certificate made on that remote pfSense server).

[A Former User]

This post is deleted!

[A Former User]

This post is deleted!