ANSWERED OpenVPN Connect 3.4.0.3121 get insecure hash algorithm in CA signature error

[Alesv 0]

Can't connect.

"OpenVPN Connect 3.4.0.3121 get insecure hash algorithm in CA signature error"

[Staff 9972]

Hello!

Please renew your client certificate and key according to the following instructions:
https://airvpn.org/forums/topic/26209-how-to-manage-client-certificatekey-pairs/
 

Reason: we signed client certificates with SHA1 between 2010 and 2017. In 2017 we started to sign them with SHA512, but the update was not forced on customers in order to avoid sudden disconnections and potential compatibility problems. You're indeed a long time customer, thank you!

Nowadays OpenSSL 3 (the SSL library used by OpenVPN) considers SHA1 based signatures insecure. By renewing the certificate you will have a new certificate signed through SHA512. Please remember that you need to re-generate your configuration file(s) after you have renewed the certificate.

Kind regards