We have OpenVPN clients with CA-Certificates from an old and a new authority.
We can't change them all at once.
The clients are verifying the certificate presented by the server.
Is it possible to sign the server certificate with the old and new CA? Is there another way that both old and new clients can connect?