TomatoUSB

I have the following error in trying to use OpenVPN

Log message

Sep 11 09:13:45 unknown daemon.notice openvpn[2141]: OpenVPN 2.2.2 mipsel-linux [SSL] [LZO2] [EPOLL] built on Sep 2 2012
Sep 11 09:13:45 unknown daemon.warn openvpn[2141]: WARNING: No server certificate verification method has been enabled.
Sep 11 09:13:45 unknown daemon.warn openvpn[2141]: NOTE: OpenVPN 2.1 requires '—script-security 2' or higher to call user-defined scripts or executables
Sep 11 09:13:45 unknown daemon.err openvpn[2141]: Cannot load CA certificate file ca.crt path (null) (SSL_CTX_load_verify_locations): error:0906D064:lib(9):func(109):reason(100): error:0B084009:lib(11):func(132):reason(9)
Sep 11 09:13:45 unknown daemon.notice openvpn[2141]: Exiting

the VyprVPN CA (public) is on file system

root@unknown:/tmp/etc/openvpn/client1# cat /tmp/etc/openvpn/client1/ca.crt
-BEGIN CERTIFICATE-
MIIEpDCCA4ygAwIBAgIJANd2Uwt7SabsMA0GCSqGSIb3DQEBBQUAMIGSMQswCQYDVQQGEwJLWTEUMBIGA1UECBMLR3JhbmRDYXltYW4xEzARBgNVBAcTCkdlb3JnZVRvd24xFzAVBgNVBAoTDkdvbGRlbkZyb2ctSW5jMRowGAYDVQQDExFHb2xkZW5Gcm9nLUluYyBDQTEjMCEGCSqGSIb3DQEJARYUYWRtaW5AZ29sZGVuZnJvZy5jb20wHhcNMTAwNDA5MjExOTIxWhcNMjAwNDA2MjExOTIxWjCBkjELMAkGA1UEBhMCS1kxFDASBgNVBAgTC0dyYW5kQ2F5bWFuMRMwEQYDVQQHEwpHZW9yZ2VUb3duMRcwFQYDVQQKEw5Hb2xkZW5Gcm9nLUluYzEaMBgGA1UEAxMRR29sZGVuRnJvZy1JbmMgQ0ExIzAhBgkqhkiG9w0BCQEWFGFkbWluQGdvbGRlbmZyb2cuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37JesfCwOj69el0AmqwXyiUJ2Bm+q0+eR9hYZEk7pVoj5dF9RrKirZyCM/9zEvON5z4pZMYjhpzrq6eiLu3j1xV6lX73Hg0dcflweM5iqxFAHCwEFIiMpPwOgLV399sfHCuda11boIPE4SRooxUPEju908AGg/i+egntvvR2d7pnZl2SCJ1sxlbeAAkYjX6EXmIBFyJdmry1y05BtpdTgPmTlJ0cMj7DlU+2gehPss/q6YYRAhrKtlZwxeunc+RD04ieah+boYU0CBZinK2ERRuAjx3hbCE4b0S6eizrQmSuGFNu6Ghx+E1xasyl1Tz/fHgHl3P93Jf0tFov7uuygQIDAQABo4H6MIH3MB0GA1UdDgQWBBTh9HiMh5RnRVIt/ktXddiGkDkXBTCBxwYDVR0jBIG/MIG8gBTh9HiMh5RnRVIt/ktXddiGkDkXBaGBmKSBlTCBkjELMAkGA1UEBhMCS1kxFDASBgNVBAgTC0dyYW5kQ2F5bWFuMRMwEQYDVQQHEwpHZW9yZ2VUb3duMRcwFQYDVQQKEw5Hb2xkZW5Gcm9nLUluYzEaMBgGA1UEAxMRR29sZGVuRnJvZy1JbmMgQ0ExIzAhBgkqhkiG9w0BCQEWFGFkbWluQGdvbGRlbmZyb2cuY29tggkA13ZTC3tJpuwwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAQEAwihrN0QNE19RRvGywBvsYDmzmM5G8ta58yB+02Mzbm0KuVxnPJaoVy4L4WocAnqLeKfmpYWUid1MPwDPtwtQ00U7QmRBRNLUhS6Bth1wXtuDvkRoHgymSvg1+wonJNpv/VquNgwt7XbC9oOjVEd9lbUd+ttxzboI8P1ci6+I861PylA0DOv9j5bbn1oE0hP8wDv3bTklEa612zzEVnnfgw+ErVnkrnk88fTiv6NZtHgUOllMq7ymlV7ut+BPp20rjBdOCNn2Q7dNCKIkI45qkwHtXjzFXIxzGq3tLVeC54g7XZIc7X0S9avgAE7h9SuRYmsSzvLTtiP1obMCHB5ebQ==
-END CERTIFICATE-
root@unknown:/tmp/etc/openvpn/client1#

Tomato Firmware 1.28.0000 MIPSR2-101 K26 USB VPN-64K (on N66U)

Total / Free Memory 249.90 MB / 235.11 MB (94.08%)
Total / Free NVRAM: 64.00 KB / 37.38 KB (58.40%)

It doesn't loo to me like it knows where to find the certificate (logs say path is (null) you're catting it from /tmp … I pasted my certificate in via the web gui, when you save tomato saves it where it should be, I believe it would be something like /etc/openvpn/client1/ca.crt or something along those lines. One thing to watch out for is switching between unix/linux machines and windows as the line breaks are different, so copy and paste out of putty terminal for instance into a web browser on a windows machine will sometimes render invalid certificates. Best solution I found there was to just scp or winscp the files over to the machine I'm going to access the web gui of tomato on and open and paste the certificates from there.

I hope that helps.