OpenVPN 客户端。外部证书签名失败

Question

我尝试在 Win10 中使用 OpenVPN 客户端，我得到以下日志：

[Dec 13, 2021, 21:32:41] Tunnel Options:V4,dev-type tun,link-mtu 1524,tun-mtu 1500,proto 
TCPv4_CLIENT,comp-lzo,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client
[Dec 13, 2021, 21:32:41] Creds: UsernameEmpty/PasswordEmpty
[Dec 13, 2021, 21:32:41] Peer Info:
IV_VER=3.git::d3f8b18b
IV_PLAT=win
IV_NCP=2
IV_TCPNL=1
IV_PROTO=30
IV_CIPHERS=AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305
IV_LZO_STUB=1
IV_COMP_STUB=1
IV_COMP_STUBv2=1
IV_IPv6=0
IV_AUTO_SESS=1
IV_GUI_VER=OCWindows_3.3.3-2562
IV_SSO=webauth,openurl,crtext

[Dec 13, 2021, 21:32:41] EVENT: EPKI_ERROR External Certificate Signing Failed⏎
[Dec 13, 2021, 21:32:41] Client exception in transport_recv_excode: 
OpenSSLContext::SSL::read_cleartext: BIO_read failed, cap=2576 status=-1: error:0607907F:digital envelope routines:EVP_PKEY_get0_RSA:expecting an rsa key / error:141F0006:SSL routines:tls_construct_cert_verify:EVP lib
[Dec 13, 2021, 21:32:41] EVENT: DISCONNECTED ⏎

客户端配置为：

port 1194
proto tcp
dev tun
ifconfig 10.3.0.1 255.255.255.0

ca C:\\Users\\User1\\openvpnkeys\\ca.crt
tls-crypt C:\\Users\\User1\\openvpnkeys\\tls.key
cipher AES-256-GCM
auth SHA256

ping 10
comp-lzo
verb 4
mute 10 

客户端和服务器证书已由安装在服务器 comp 上的 easy-rsa 创建。 有什么问题？

Answer 1

已解决。问题出在链接中。我已将证书放入配置文件的正文中，并且客户端已成功连接。

不得不说日志比较差。