Changes between Version 26 and Version 27 of HOWTO
- Timestamp:
- 03/27/17 13:01:34 (7 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
HOWTO
v26 v27 150 150 In this section we will generate a master CA certificate/key, a server certificate/key, and certificates/keys for 3 separate clients. 151 151 152 For PKI management, we will use [https://github.com/OpenVPN/easy-rsa easy-rsa], a set of scripts which is bundled with OpenVPN 2.2.x and earlier. If you're using OpenVPN 2.3.x, you may need to download easy-rsa separately from the [https://github.com/OpenVPN/easy-rsa easy-rsa project page]. An easy-rsa package is also available for Debian and Ubuntu in the [wiki:OpenvpnSoftwareRepos OpenVPN software repos].152 For PKI management, we will use [https://github.com/OpenVPN/easy-rsa-old easy-rsa 2], a set of scripts which is bundled with OpenVPN 2.2.x and earlier. If you're using OpenVPN 2.3.x, you may need to download easy-rsa 2 separately from the [https://github.com/OpenVPN/easy-rsa-old easy-rsa-old project page]. An easy-rsa 2 package is also available for Debian and Ubuntu in the [wiki:OpenvpnSoftwareRepos OpenVPN software repos]. On *NIx platforms you should look into using [https://github.com/OpenVPN/easy-rsa easy-rsa 3] instead; refer to its own documentation for details. 153 153 154 154 If you are using Linux, BSD, or a unix-like OS, open a shell and cd to the easy-rsa subdirectory. If you installed OpenVPN from an RPM or DEB file provided by your distribution, the easy-rsa directory can usually be found in '''/usr/share/doc/packages/openvpn''' or '''/usr/share/doc/openvpn''' (it's best to copy this directory to another location such as '''/etc/openvpn''', before any edits, so that future OpenVPN package upgrades won't overwrite your modifications).