OpenVPN Microtic or client grief?

Question

openvpn

This is my situation, I set up an openvpn server on Mikrotik, but I can’t connect, an error

Mon May 21 21:14:00 2018 OpenVPN 2.4.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 26 2018
Mon May 21 21:14:00 2018 Windows version 6.2 (Windows 8 or greater) 64bit
Mon May 21 21:14:00 2018 library versions: OpenSSL 1.1.0h  27 Mar 2018, LZO 2.10
Enter Management Password:
Mon May 21 21:14:01 2018 WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
Mon May 21 21:14:01 2018 OpenSSL: error:140AB18E:SSL routines:SSL_CTX_use_certificate:ca md too weak
Mon May 21 21:14:01 2018 Cannot load certificate file C:\Program Files\OpenVPN\config\cert\client.crt
Mon May 21 21:14:01 2018 Exiting due to fatal error

The first one, as I understand it, wants to use remote-cert-tls, but has not yet caught up with how Google turns it off, I don’t even know how to turn it on)
The second is weak md protection, I don’t know where he got it, I don’t have this md
and the third one, there is no certificate .
In general, dick knows where such data comes from, help me figure it out, I can’t connect.
Client Settings

spoiler

dev tap
proto tcp-client
#persist-tun
#persist-key
cipher AES-256-CBC
#auth SHA256
auth SHA1
pull
tls-client
remote-cert-tls server
client
resolv-retry infinite
remote ip 2222 tcp
lport 0
#указываем имена публичного CA сертификата
ca "C:\\Program Files\\OpenVPN\\config\\cert\\ca.crt"
# публичного сертификата клиента
cert "C:\\Program Files\\OpenVPN\\config\\cert\\client.crt"
# и его закрытый ключ
key "C:\\Program Files\\OpenVPN\\config\\cert\\client.key"
ns-cert-type server
passtos
auth-user-pass "C:\\Program Files\\OpenVPN\\config\\cert\\onevpn.auth"

concerning

tls-client
remote-cert-tls server

In the client settings and with them and without them the same.

I don't know, can I restart my computer?

Answer 1

in general, the point is that the certificate was generated, in the old version md5 is used there and connected from a new client, there is no md5 because it is not safe. put the old one, the problem is new
ovpn debug error l2tp unknown unknown unknown unknown unknown unknown l2tp info unknown debug
Duplicate package dropping, it doesn't go any further, what's wrong with it? where my mistakes can not understand.