title: Azure VPN / OpenVPN(SSL) Peer certificate verification failure
body: <p>We created a root crtificate, which unfortunately expired today in Azure VPN, I regenerated the certificate, upload it to Azure VPN, regenerated a client certificate and se up the OpenVPN configuration file.  (After downloaadin the &quot;VPN Client&quot; from the Azure portal.</p>
  <p>However, I keep getting &quot;Peer certification verification failure&quot; and I can't seem to understand why.  Everything I read suggests that it is as there is a mismatch between the server and the client, however, I must be making the same mistakes, as I have followed the instructions below to generate the root certs, and the client certs::</p>
  <p><a href="https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site#cer" rel="nofollow noreferrer">https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site#cer</a></p>
  <p>I've used the following open-ssl command to generate convert to a PEM file:</p>
  <pre><code>&quot;C:\Program Files\OpenSSL-Win64\bin\openssl&quot; pkcs12 -in child.pfx -out child.pem -clcerts
  </code></pre>
  <p>Then followed this for creating the OVPN file for the iOS device.  (I have downloaded the OpenVPN Client to my desktop machine to make it easier to test)</p>
  <p><a href="https://docs.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-cert-mac" rel="nofollow noreferrer">https://docs.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-cert-mac</a></p>
  <p>I have done this more than once, as well as having &quot;Reset&quot; the VPN gateway, just to try and make sure that it isn't something weird going on.</p>
  <p>Does anyone have any ideas as to where I am going wrong?</p>