Openvpn Server multiple Certs

Question

We have OpenVPN clients with CA-Certificates from an old and a new authority.

We can't change them all at once.

The clients are verifying the certificate presented by the server.

Is it possible to sign the server certificate with the old and new CA? Is there another way that both old and new clients can connect?

Community · Accepted Answer · 2017-05-23 12:41:13Z

2

There is a very similar question at StackOverflow and instruction about how to use multiple CAs (stacked certificates).

Another way is to run two OpenVPN instances on the same host, providing them with different ports and certificates signed by different CAs.

Community♦

1

answered Nov 18 '14 at 12:56

Viktor

1611 silver badge4 bronze badges

Merlin, thank you for your reply. This is what I was looking for. I can't use stacked certificates because then I would have to modify all client CA-files. I'll use two OpenVPN instances. – chris Nov 18 '14 at 15:08

Add a comment |

1 Answer 1