Changes between Version 6 and Version 7 of EasyRSA3-OpenVPN-Howto

Timestamp:

11/30/13 22:29:06 (10 years ago)

Author:

JoshC

Comment:

clarify separate locations better

EasyRSA3-OpenVPN-Howto

@@ -9 +9 @@
 == Separate CA system procedure ==
 
-Pick a location for the CA and each entity that will be assigned certs. All keypair/request generation should occur on the target system that will use them; put another way, generate your client & server requests/keys on each system for best security.
+Pick locations for the CA and each entity that will be assigned certs. All keypair/request generation should occur on the target system that will use them; put another way, generate your client & server requests/keys on each system for best security.
 
 You will end up with the following locations used in the steps below:
 
  CA:: your secured CA environment
- entity:: each client and server has their own, separate environment
+ entity:: each client and server has their own, separate environment; this will usually include at least 2 locations, one for the server and another for your client (on their respective machines.)
 
 1. On the CA, start a new PKI and build a CA keypair/cert: