Opened 6 years ago
Last modified 5 years ago
#1195 assigned Bug / Defect
Man page example 3 refers to dh1024.pem which does not exist
| Reported by: | mnowak | Owned by: | David Sommerseth |
|---|---|---|---|
| Priority: | minor | Milestone: | |
| Component: | Documentation | Version: | OpenVPN 2.4.7 (Community Ed) |
| Severity: | Not set (select this one, unless your'e a OpenVPN developer) | Keywords: | |
| Cc: |
Description
Man page example 3 refers to dh1024.pem which does not exist in openvpn-2.4.7/sample/sample-keys/. Better to replace it there with
dh2048.pem
:
Example 3: A tunnel with full TLS-based security
...
For Diffie Hellman parameters you can use the included
>>> file dh1024.pem. Note that all client, server, and certificate
authority certificates and keys included in the OpenVPN distribution
are totally insecure and should be used for testing only.
...
On alice:
openvpn --remote bob.example.com --dev tun1 --ifconfig 10.4.0.2
>>> 10.4.0.1 --tls-server --dh dh1024.pem --ca ca.crt --cert
server.crt --key server.key --reneg-sec 60 --verb 5
...
Change History (1)
comment:1 Changed 5 years ago by
| Owner: | set to David Sommerseth |
|---|---|
| Status: | new → assigned |
@dazo: since you're on the manpage right now...