# \[HELP\]TrueNAS OpenVPN Client Setup Issue

**URL:** <https://forums.spacerex.co/t/help-truenas-openvpn-client-setup-issue/222>\
**Category:** TrueNAS\
**Tags:** help, vpn\
**Created:** [March 22, 2023, 3:26am UTC](https://forums.spacerex.co/t/help-truenas-openvpn-client-setup-issue/222 "2023-03-22T03:26:06Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![n850903](https://forums.spacerex.co/user_avatar/forums.spacerex.co/n850903/32/111_2.png) [@n850903](https://forums.spacerex.co/u/n850903)\
**Post date:** [March 22, 2023, 3:26am UTC](https://forums.spacerex.co/t/help-truenas-openvpn-client-setup-issue/222/1 "2023-03-22T03:26:06Z")

</div>

Hi guys, thanks for clicking into this post and I could really use some help here 'cause I don’t know what’s going on here… So a little bit of back story.

I have a Synology DS1821 connect to my ASUS router at location A, on the ASUS router I have the OpenVPN server open and is working perfectly fine, my iPhone and my laptop can all connect to my router from outside.  
A while ago I wished to have anther copy of my file at another location, B, on a totally differnt network and IP. So I bought a Synology DS920+ as a backup solution, uploaded the OVPN into DSM and it just worked. Recently I sold that DS920+ and built another TrueNAS system as an upgrade but I somehow can’t get the VPN connection to work, both CORE and SCALE.  
Frist I follow the official guide like everyone else:

# Configuring a 3rd Party VPN service on TrueNAS

Then, at the OpenVPN client setup page this would just popup:

 ![image](https://forums.spacerex.co/uploads/default/original/1X/7fe353cc1d7d50f5368ac9d3b598a931ba9fc93b.png)  
So I started to see if there are people like me on reddit, then I landed on this post:

> **[Reddit - The heart of the internet](https://www.reddit.com/r/truenas/comments/w32rk7/truenas_scale_openvpn_form_opnsense_root_ca_must/)**

Which also took me to this page:

> **[OpenVPN-Client disable CA-KeyUsage checking](https://www.truenas.com/community/threads/openvpn-client-disable-ca-keyusage-checking.88814/)**
>
> Hi, I try to connect a TrueNAS-Core to a opnSense-Firewall (FreeBSD based).
> When I try to setup the Client. I can't import the CA generated bei opnSense because of "Root CA must have CRL Sign set for KeyUsage extension."
> 
> Is it possible to disable...

But the solution mentions creating a OpenVPN config under mnt, which I have totally no idea how.

Also, below is the redected version of my OVPN file:

```auto
remote <MY IP> <MY PORT>
float
nobind
proto tcp-client
dev tun
sndbuf 0
rcvbuf 0
keepalive 10 30

# for OpenVPN 2.4 or older
comp-lzo yes
# for OpenVPN 2.4 or newer
;compress lzo

auth-user-pass
client
auth SHA1
cipher AES-128-CBC
remote-cert-tls server
<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----

</ca>

#
# Update client certificate and key if necessary
#
<cert>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----

</key>

```

If I can’t get this to work I guess I’ll have to just get another Synology and sell this system…  
Any kind of help is greatly appreciated.

---

<div class="post-metadata">

**Author:** ![kerwin](https://forums.spacerex.co/user_avatar/forums.spacerex.co/kerwin/32/993_2.png) [@kerwin](https://forums.spacerex.co/u/kerwin)\
**Post date:** [July 10, 2024, 3:43pm UTC](https://forums.spacerex.co/t/help-truenas-openvpn-client-setup-issue/222/2 "2024-07-10T15:43:14Z")

</div>

I’m having the same problem. Has anyone come up with a solution? I cant seem to find anything to help with the cert issues on TrueNAS to connect to Synology OpenVPN