Macos – Using OpenVPN from Mac OSX Terminal, cannot load Tun/Tap

The question is in a slightly different context, but the answer is here...

Debian eth0 to wlan0 forwarding, with openvpn

Basically ifplugd is taking down the WiFi interface. As only one roaming interface is supposed to be active at once.

When this is called:

/etc/ifplugd/action.d/action_wpa tun0 up

The script loops disconnecting any wpa-roaming devices...

for CTRL in /var/run/wpa_supplicant/*; do

    [ -S "${CTRL}" ] || continue

    IFACE="${CTRL#/var/run/wpa_supplicant/}"

    # skip if ifplugd is managing this interface
    if [ "${IFPLUGD_IFACE}" = "${IFACE}" ]; then
        continue
    fi

    if wpa_action "${IFACE}" check; then
        wpa_cli -i "${IFACE}" "${COMMAND}"
    fi
done

This script needs to be extended to check other interfaces that are being managed by ifplugd not just the one that is called with the script.

error 10 at 0 depth means your server cert has expired, not your CA cert. Issue a new server cert -- for the same privatekey if you like, and definitely for the same DN -- and use that. The whole reason to have/use a CA is so that you can issue child (server and client) certs whenever needed, without the hassle of manually distributing them, only distributing the one CA cert.