错误信息是足够清楚的。 一些证书数据无效。 但是提供的debugging数据对我来说似乎有些微不足道。 我如何find证书128？ 令人困惑的是这个文件是最新的，所以这个bug对我来说不是唯一的，但是在search中我找不到这些错误信息。
uname -a FreeBSD peets 11.0-RELEASE-p9 FreeBSD 11.0-RELEASE-p9 #0: Tue Apr 11 08:48:40 UTC 2017 [email protected]:/usr/obj/usr/src/sys/GENERIC amd64 Jul 1 00:25:37 peets openvpn[57897]: OpenVPN 2.4.3 amd64-portbld-freebsd11.0 [SSL (OpenSSL)] [LZO] [LZ4] [MH/RECVDA] [AEAD] built on Jun 24 2017 Jul 1 00:25:37 peets openvpn[57897]: library versions: OpenSSL 1.0.2k-freebsd 26 Jan 2017, LZO 2.10 Jul 1 00:25:37 peets openvpn[57898]: Diffie-Hellman initialized with 4096 bit key Jul 1 00:25:37 peets openvpn[57898]: Cannot load CA certificate file /usr/local/share/certs/ca-root-nss.crt (entry 128 did not validate) Jul 1 00:25:37 peets openvpn[57898]: Cannot load CA certificate file /usr/local/share/certs/ca-root-nss.crt (only 169 of 170 entries were valid X509 names) Jul 1 00:25:37 peets openvpn[57898]: Exiting due to fatal error