Options error: You must define CA file (--ca) or CA path (--capath)

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
dapinder
Posts: 1
Joined: Wed Jul 24, 2019 10:56 am

Options error: You must define CA file (--ca) or CA path (--capath)

Post by dapinder » Wed Jul 24, 2019 11:03 am

I installed the latest build of SoftEther Server on Windows 2019 Server - Ver 4.30, Build 9696, beta.

After setting up the VPN server successfully, I downloaded the OVPN sample file and noticed that the certificate is not embedded in it by default (this wasn't the case when I configured a VPN server 6 months ago using the build - Ver 4.29, Build 9680, rtm).

Below is how the ovpn file looks like (including just the end part).

###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3

###############################################################################
# Authentication with credentials.
#
# Comment the line out in case you want to use the certificate authentication.

auth-user-pass



###############################################################################
# Client certificate and key.
#
# A pair of client certificate and private key is required in case you want to
# use the certificate authentication.
#
# To enable it, uncomment the lines below.
# Paste your certificate in the <cert> block and the key in the <key> one.

;<cert>
;-----BEGIN CERTIFICATE-----
;
;-----END CERTIFICATE-----
;</cert>

;<key>
;-----BEGIN RSA PRIVATE KEY-----
;
;-----END RSA PRIVATE KEY-----
;</key>



When trying to connect using OpenVPN client, I am getting below error.

Options error: You must define CA file (--ca) or CA path (--capath)
Use --help for more information.


I am no where close to being a networking expert and have no clue how to get this sorted. Any help would be much appreciated!

I can obviously uninstall the beta build and fall back to RTM version but I am pretty curious to understand if there is an easy way to include the certificate in ovpn file.

CSM
Posts: 7
Joined: Fri Mar 18, 2016 1:07 am

Re: Options error: You must define CA file (--ca) or CA path (--capath)

Post by CSM » Mon Jul 29, 2019 3:04 am

Had same problem when I setup a new server and the 9696 beta. Couldn't get it to work, so went back to the rtm version and it is working ok. I'm also interested in more details here so that I can get working on the latest version.

Thanks, Carl

danielckw
Posts: 1
Joined: Wed Oct 23, 2019 9:08 am

Re: Options error: You must define CA file (--ca) or CA path (--capath)

Post by danielckw » Wed Oct 23, 2019 9:17 am

CSM wrote:
Mon Jul 29, 2019 3:04 am
Had same problem when I setup a new server and the 9696 beta. Couldn't get it to work, so went back to the rtm version and it is working ok. I'm also interested in more details here so that I can get working on the latest version.

Thanks, Carl
Hello Carl,

I also uninstalled 9696 and installed the rtm on the server side. But i still faced this "Options error: You must define CA file (--ca) or CA path (--capath)"..... I got this error from the client PC "OpenVPN GUI".

Any clue pm how to solve this?

Post Reply