title: OpenVPN + Opnsense Unable to connect. Options error: You must define CA file
body: <p>I am new to Opnsense , but I have most things configured Ok. </p>
  
  <p>What I am having trouble with is setting up OpenVPN and connecting to it over the internet.</p>
  
  <p>While I am not setting this up on a mac ( I am trying to connect from windows 10 ) , I figured that the instructions <a href="https://www.sparklabs.com/support/kb/article/setting-up-an-openvpn-server-with-opnsense-and-viscosity/#setting-up-an-openvpn-server-with-opnsense-and-viscosity" rel="nofollow noreferrer">here</a> would be sufficient to get me most of the way and then I just export the client file instead of the Viscoscity configuration. </p>
  
  <p>I have set up the server and ( I believe ) added correct firewall rules as part of the process.</p>
  
  <p>When I go to connect , I figure that the .ovpn file generated should be enough as it contains certificates embedded. But the long file says:</p>
  
  <pre><code>Options error: You must define CA file (--ca) or CA path (--capath)
  Use --help for more information.
  </code></pre>
  
  <p>My .ovpn file looks like this ( generated from VPN > client Export ) </p>
  
  <pre><code>dev tun
  persist-tun
  persist-key
  cipher AES-128-CBC
  auth SHA1
  client
  resolv-retry infinite
  remote my.server.static.ip 1194 udp
  lport 0
  verify-x509-name "C=NL, ST=Zuid-Holland, L=Middelharnis, O=OPNsense" subject
  auth-user-pass
  &lt;cert&gt;
  -----BEGIN CERTIFICATE-----
  
  [server cert stuff , about 25 lines long]
  
  -----END CERTIFICATE-----
  &lt;/cert&gt;
  &lt;key&gt;
  -----BEGIN PRIVATE KEY-----
  
  [private key stuff, about 25 lines long]
  
  -----END PRIVATE KEY-----
  &lt;/key&gt;
  &lt;tls-auth&gt;
  #
  # 2048 bit OpenVPN static key
  #
  -----BEGIN OpenVPN Static key V1-----
  
  [static key stuff , about 15 lines long]
  
  -----END OpenVPN Static key V1-----
  &lt;/tls-auth&gt;
  key-direction 1
  </code></pre>
  
  <p>Why is it asking for CA files if the certificate info is embedded - and how can I connect to the server?</p>