RS700 VPN Service certs incomplete?

MrChrisH​ 

If you learn something useful and are allowed to 'share', please update the conversation.

I notice the same WARNING about certificate verification method when using OpenVPN with my ancient Orbi system. (Opened a VPN connection just now)

I wonder if this could be a situation similar to the frustration we all experience with modern web browsers issuing similar warnings about the web interface of the router itself.  i.e.

• If we connect using http, browsers warn UNSAFE, because by definition http is not encrypted and thus "unsafe".
• If we connect using https, browsers warn UNSAFE, because the SSL certificate is self-signed and thus there is no "God Like" certificate authority guaranteeing that this SSL certificate belongs to the organization claiming it.

These warnings, of course, overlook the plain fact that WE deliberately CHOSE which web site for the connection (our own router, on our network).  We did not get a link from some site on the internet or from a suspect email.

In a sense, our use of OpenVPN is similar.  WE chose to open a connection to this specific IP address (or DDNS address) and we are exchanging Keys that WE created using OpenVPN on our router.

For YEARS, I have simply ignored that OpenVPN warning when using OpenVPN.  If there is a simple method to (a) make the warning disappear and (b) improve security, I'm all for it.