Android to Pfsense Openvpn - Certificate / Key / CA ?

[willi9999]

Hy,

I got a openvpn server (linux) set up and working, pfsense is the client. So I already have CA, Cert, Key (named them ca.crt
vpnkey.crt,vpnkey.key) Pfsense doesnt need vpnkey.key, but android vpn does, both connect).

If I use that three files for a pfsense openvpn server and if i connect by android it gets me an error that rsa key size is too big.

So I tried to create a new certificate with the pfsense wizard, and use the webconfigurator ca, the webconfigurator crt and key.

I get the following:

VERIFY ERROR: depth=0, error=self signed certificate: C=US, ST=Somewhere, L=Somecity, O=CompanyName, OU=Organizational Unit Name (eg, section), CN=Common Name (eg, YOUR name), emailAddress=Email Address

TLS_ERROR: BIO read tls_read_plaintext error: error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned

TLS Error: TLS object -> incoming plaintext read erro

TLS Error: TLS handshake failed

What does that mean?
Thx!

[willi9999]

found out, wasnt a server certificate i used, this walkthrough works:

https://www.highlnk.com/2013/12/configuring-openvpn-on-pfsense/