Problem in export OpenVPN client while server is using intermediate CA
I tried to issue an intermediate CA and it's server, client certs. But it prompted the "VERIFY ERROR" on the client when connecting the server. I found some an issue on package "OpenVPN Client Export Utility" that cannot export the correct cert chain (It will miss the intermediate CA). I had set the option "Certificate Depth" to "Two (Client+Intermediate+Server)", but get the same result also. I imported the ".p12" file and found that the cert chain is missed the intermediate CA. So I think it export the not fully chain. Any ideas for the case?
This has been broken for ages… https://redmine.pfsense.org/issues/2800
Noted with many thanks. This may solve the problem temporary.