We used vanilla client config downloaded from https://www.zeroshell.org/download/zeroshell.ovpn with only a change for the server IP.
I also asked in the OpenVPN forum https://forums.openvpn.net/topic21541.html#p60956 but so far it seems he is talking about generating the certificate. As I understand, Zeroshell generates its own certificates. Do we have to use 1024 bit certificate only? I’ve used 4096 bits. Is that a problem?
What is he talking about here:
There are two ways to designate a certificate as a server:
nscerttype server (deprecated)
remote-cert-tls server
It seems that above the certificate says it is “nscerttype server”.
Overall, I feel lost and confused. This should not be such a daunting task, somewhere there is a huge design flaw if getting VPN to work is so difficult.