Easy-TLS a.k.a. easytls

This forum is for general conversation and user-user networking.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Post Reply
TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Easy-TLS a.k.a. easytls

Post by TinCanTech » Sun Mar 28, 2021 3:38 am

Welcome to Easy-TLS for OpenVPN

Where to find Easy-TLS:
https://github.com/TinCanTech/easy-tls

Howto install Easy-TLS:
Copy this file to your Easy-RSA3 working directory.
https://github.com/TinCanTech/easy-tls/ ... er/easytls

Howto use Easy-TLS:
  • *nix:
    • ./easytls init-tls
    • ./easytls build
    • ./easytls inline
    • ./easytls remove
  • Windows:
    • Start the Easy-RSA Shell by opening EasyRSA-Start.bat
    • And do as for *nix above.
  • And walk through the inter-active menus.
Easy-TLS also includes server-side scripts and an inter-active menu to configure that as well.

If you have any questions then please ask.

stevekhoa
OpenVpn Newbie
Posts: 2
Joined: Thu Feb 24, 2022 5:59 pm

Re: Easy-TLS a.k.a. easytls

Post by stevekhoa » Fri Feb 25, 2022 4:51 am

I git this ussue

# ./easytls init-tls
Missing: C:/Progra~1/Openvpn/bin/.exe
Missing: C:/Progra~1/Openvpn/bin/.exe

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Easy-TLS a.k.a. easytls

Post by TinCanTech » Fri Feb 25, 2022 4:39 pm

I have committed ecfc8ea5e8ca999c910f78225e2a5ddd5601e705, which should fix that.

heavenlyhost
OpenVpn Newbie
Posts: 1
Joined: Mon Oct 17, 2022 12:44 pm

Re: Easy-TLS a.k.a. easytls

Post by heavenlyhost » Mon Oct 17, 2022 1:23 pm

I think this is a tremendously useful tool. However, I have not been able to create a server specific client key with it. What I mean is that it is possible to create multiple server keys but when it comes to generating client keys, for example, Client1 which has a key generated for Server A which work only for server A. If I attempt to create a key for Client1 for use on Server B it throws an error because the filename already exist. The issue is that keys generated for Server A are not compatible with Server B. I am not sure why this is so but creating a secondary Easy-Rsa CA solves the issue for me. CA's for each server is not practical. If I am missing something please let me know what it is. I also get errors using ./easytls remove.

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Easy-TLS a.k.a. easytls

Post by TinCanTech » Mon Oct 17, 2022 2:00 pm

If you are using a --tls-crypt-v2 server key then you can use that on many servers, not just a single server.

If you have a github account then you can post issues here: https://github.com/TinCanTech/easy-tls/issues

Alex33
OpenVpn Newbie
Posts: 1
Joined: Fri Jul 21, 2023 12:53 am

Re: Easy-TLS a.k.a. easytls

Post by Alex33 » Fri Jul 21, 2023 2:02 am

EasyRSA Shell
# ./easytls init-tls
Missing: c:/Progra~1/Openvpn/easy-rsa/bin
Missing: c:/Progra~1/Openvpn/easy-rsa/bin
Missing: c:/Progra~1/Openvpn/easy-rsa/bin/cat.exe
Missing: c:/Progra~1/Openvpn/easy-rsa/bin/date.exe
Missing: c:/Progra~1/Openvpn/easy-rsa/bin/grep.exe
Missing: c:/Progra~1/Openvpn/easy-rsa/bin/ls.exe
Missing: c:/Progra~1/Openvpn/easy-rsa/bin/mv.exe
Missing: c:/Progra~1/Openvpn/easy-rsa/bin/sed.exe
Missing: c:/Progra~1/Openvpn/easy-rsa/bin/printf.exe
Windows file setup error!

Everything is in "OpenVPN" sub-folder. I don't have "Openvpn"
Also, i am using EasyRSA-3.1.5, in "EasyRSA-3.1.5" sub-folder, not "easy-rsa" as outputted.
I copied "easylts" file (255KB) to ~/OpenVPN/EasyRSA-3.1.5 were "easyrsa" file is located.
Interestingly, all those missing *.exe file are located in ~/OpenVPN/EasyRSA-3.1.5/bin

SOLVED:
Just edit "easytls" file

Post Reply