OpenVPN and PfSense

[paulhuynh]

here is my vpn.cnf with the latest firmware

I am not sure why it is not work

..
.\keys
.\vpncnf


client
dev tun
persist-tun
persist-key
proto udp
nobind
remote xxx.xxx.xxx.xxx 1196
resolv-retry infinite
ca /config/openvpn/keys/YealinkCA.crt
cert /config/openvpn/keys/SIPHONE.crt
key /config/openvpn/keys/SIPPHONE.key




Error are as follow
Jun 23 10:01:39 openvpn[43495]: 71.230.11.183:1026 Re-using SSL/TLS context
Jun 23 10:01:41 openvpn[43495]: 71.230.11.183:1026 VERIFY ERROR: depth=0, error=unsupported certificate purpose: /C=US/ST=DELAWARRE/L=BEAR/O=AIN/emailAddress=vpn@ainofde.com/CN=YealinkCert
Jun 23 10:01:41 openvpn[43495]: 71.230.11.183:1026 TLS_ERROR: BIO read tls_read_plaintext error: error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned
Jun 23 10:01:41 openvpn[43495]: 71.230.11.183:1026 TLS Error: TLS object -> incoming plaintext read error
Jun 23 10:01:41 openvpn[43495]: 71.230.11.183:1026 TLS Error: TLS handshake failed
Jun 23 10:02:40 openvpn[43495]: 71.230.11.183:1026 Re-using SSL/TLS context
Jun 23 10:02:43 openvpn[43495]: 71.230.11.183:1026 VERIFY ERROR: depth=0, error=unsupported certificate purpose: /C=US/ST=DELAWARRE/L=BEAR/O=AIN/emailAddress=vpn@ainofde.com/CN=YealinkCert
Jun 23 10:02:43 openvpn[43495]: 71.230.11.183:1026 TLS_ERROR: BIO read tls_read_plaintext error: error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned
Jun 23 10:02:43 openvpn[43495]: 71.230.11.183:1026 TLS Error: TLS object -> incoming plaintext read error
Jun 23 10:02:43 openvpn[43495]: 71.230.11.183:1026 TLS Error: TLS handshake failed

[Yealink Support]

Hi Paul,
We list the step about how to setup OpenVPN step by step, so firstly could you check whether your setting is correct or not?
Please refer to our manual as the attachment.