NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
RS700 VPN Service certs incomplete?
I've been setting up NoIP and the VPN Service on my RS700. I'm on firmware version V1.0.9.6_2.0.100. After much tinkering and following much of the helpful advice here, I have a connection that ...
The certificate provided by the router seems to be missing the necessary Key Usage (KU) flags.
Are you seeing a section like this in client.crt?
X509v3 Extended Key Usage:
TLS Web Client Authentication
No. I'm not seeing a section with that header.
No. I'm not seeing a section with that header.
That is why you have the problem.
FWIW, I missed a second relevant line from my client.crt (from an Orbi, not an RS700):
X509v3 Extended Key Usage: TLS Web Client Authentication X509v3 Key Usage: Digital SignatureOnly Netgear can fix this, as adding this text would invalidate the cert's digital signature.
All you can do for now is remove remote-cert-tls server.