Changes between Version 11 and Version 12 of EasyRSA3-OpenVPN-Howto

Timestamp:

12/17/13 23:12:01 (10 years ago)

Author:

JoshC

Comment:

Improve import & signing descriptions

EasyRSA3-OpenVPN-Howto

@@ -48 +48 @@
 4. Send the request files from each entity to the CA system. This is not security sensitive, though it is wise to verify the received file matches the sender's copy if the transport is untrusted.
 
-5. On the CA, import each entity request file, giving it an arbitrary "short name" as follows. Optionally, the imported request details can be displayed after importing. This basically just copies the request file into `reqs/` under the PKI dir.
+5. On the CA, import each entity request file, giving it an arbitrary "short name" as follows. This basically just copies the request file into `reqs/` under the PKI dir to prepare it for review and signing.
 {{{
 ./easyrsa import-req /path/to/received.req UNIQUE_SHORT_FILE_NAME
 }}}
 
-6. Review the request details if you wish, then sign it as one of the types: server or client.
+6. Review each request's details if you wish, then sign it as one of the types: server or client.
   A. (optional) review the request:
 {{{
 ./easyrsa show-req UNIQUE_SHORT_FILE_NAME
 }}}
-  B. Sign as a client:
+  B. If you are signing as a '''client''':
 {{{
 ./easyrsa sign client UNIQUE_SHORT_FILE_NAME
 }}}
-  C. Sign as a server:
+  C. If you are signing as a '''server''':
 {{{
 ./easyrsa sign server UNIQUE_SHORT_FILE_NAME
 }}}
 
-7. The CA returns the signed certificate, and includes the CA certificate unless the client already has it. This can be done over an insecure channel, though the client is encouraged to confirm the received CA cert is valid if the transport is untrusted.
+7. The CA returns the signed certificate produced in the above step, and includes the CA certificate (ca.crt) unless the client already has it. This can be done over an insecure channel, though the client is encouraged to confirm the received CA cert is valid if the transport is untrusted.
 
 == DH Generation ==