Using X.509 Certificates

OpenVPN relies heavily on X.509 certificates for authenticating both the server and clients. Managing and using X.509 certificates is often referred to as managing a Public Key Infrastructure (PKI).

The basics of using X.509 certificates are covered by the 'easy-rsa' scripts, which are part of the regular OpenVPN distribution. This page contains more detailed information on the use of certificates.

Topics

• Using certificate chains
• Using Puppet for certificate management