2024-12-03T05:26:49.041Z

<Nitzan Mordechai> Thanks!!

2024-12-03T10:32:39.777Z

<Jose J Palacios-Perez> still not working for me :cry: will continue digging: https://files.slack.com/files-pri/T1HG3J90S-F083GKYQVSQ/download/screenshot_2024-12-03_at_10.29.32.png

2024-12-03T10:52:39.424Z

<Jose J Palacios-Perez> I think I need to do further steps: <https://tunnelblick.net/cConfigT.html#files-contained-in-a-tunnelblick-vpn-configuration>

2024-12-03T11:22:49.173Z

<Jose J Palacios-Perez> I tried making a copy of the configuration from the left panel, I copied the new certificate in the corresponding subdir (`/Library/Application\ Support/Tunnelblick/Users/<user>/copy_sepia/sepia.tblk/Contents/Resources/)` ensured with the correct permissions, but still complains about a self signed cert error?:: https://files.slack.com/files-pri/T1HG3J90S-F083T2EAPMF/download/screenshot_2024-12-03_at_11.20.40.png

2024-12-03T12:26:25.016Z

<Jose J Palacios-Perez> Drag and drop as per the instructions does not have the effect I was expecting, not sure why 🤔
Oddly, since the cert has been proved to work for other people, I wonder whether the following is a red herring:
```2024-12-03 11:19:28.515640 VERIFY ERROR: depth=1, error=self-signed certificate in certificate chain: CN=openvpnca-sepia, serial=319824696664668756249066534111061608136050284525
2024-12-03 11:19:28.515726 OpenSSL: error:0A000086:SSL routines::certificate verify failed:
2024-12-03 11:19:28.515778 TLS_ERROR: BIO read tls_read_plaintext error
2024-12-03 11:19:28.515848 NOTE: --mute triggered...```

2024-12-03T14:50:38.415Z

<Jose J Palacios-Perez> Working now!

2024-12-03T14:51:28.516Z

<David Galloway> @Jose J Palacios-Perez What'd you change in case others need to repeat your steps?

2024-12-03T14:56:48.245Z

<Jose J Palacios-Perez> 1. copied the new ca.cert into my openvpn folder -- created when | originally installed the sepia archive (tgz) when I first joined
2. drag the sepia.conf (which is a symlink to the sepia/client.conf) to the left hand side panel of the tunnelblik Configurations: was prompted to enter creds to harden/secure the changed configuration to replace the existing one
3. tried connected and worked, no longer self singed crt error in the logs: https://files.slack.com/files-pri/T1HG3J90S-F083CJKM885/download/screenshot_2024-12-03_at_14.54.27.png

2024-12-03T14:57:23.422Z

<Jose J Palacios-Perez> 1. copied the new ca.cert into my openvpn folder -- created when | originally installed the sepia archive (tgz) when I first joined
2. drag the sepia.conf (which is a symlink to the sepia/client.conf) to the left hand side panel of the tunnelblik Configurations: was prompted to enter creds to harden/secure the changed configuration to replace the existing one
3. tried connect and worked, no longer self singed crt error in the logs

2024-12-03T18:27:58.877Z

<Dan Mick> Tunnelblick doesn't define very well when configurations are copied, and particularly when they refer to external files, but the trick is to get it to recognize your new configuration, which it sounds like you finally did

2024-12-03T20:42:51.335Z

<Laura Flores> @Jose J Palacios-Perez before when you were experiencing the issue, did you just replace the ca.crt but not re-add the configuration?