[SOLVED] deleted vars and configuration files

mtonini

Hi all,
I'm newbie in the forum and I have a problem with Openvpn 2.1.
I successfully configured a Ubuntu server and a few clients and all is working.
The problem is that I have accidentrally deleted files which I used to create users (The 2.0 directory) with
vars
ca.crt
ca.key
dh1024.pem
server.crt
server.key
I have a copy of ca.crt and of the generated clients.
The problem is that I can't create new users ..... :cry:
Someone can help me ?

Thank you
Bye

maikcat

hi there,

without ca.key you simply cant create new certs....

Michael.

mtonini

Hi,
thank you for the answer, I watched in the server configuration I have also:

ca.key, dh1024.pem, server.crt and server.key but I don't have the vars file can I rebuild it ?

janjust

list which files you have and in which directory they reside - you can probably reconstruct the 'vars' file by looking at the default file supplied with openvpn.

mtonini

Hi,
I have the following files:

/etc/openvpn/keys/server.crt
/etc/openvpn/keys/server.key
/etc/openvpn/keys/ca.key
/etc/openvpn/keys/ca.crt
/etc/openvpn/keys/dh10204.pem

for each defined user:
/etc/openvpn/user1/user1.key
/etc/openvpn/user1/user1.csr
/etc/openvpn/user1/user1.crt

and

/etc/openvpn/server.conf
/etc/openvpn/ipp.txt

Thank you

Bye

janjust

the vars file in its simplest form would be something like:

export EASY_RSA="`pwd`"
export KEY_CONFIG="$EASY_RSA/openssl.cnf"
export KEY_DIR="$EASY_RSA/keys"
echo NOTE: If you run ./clean-all, I will be doing a rm -rf on $KEY_DIR
export KEY_SIZE=1024
export CA_EXPIRE=3650
export KEY_EXPIRE=3650

export KEY_COUNTRY=...
export KEY_PROVINCE=...
export KEY_CITY=...
export KEY_ORG=...
export KEY_EMAIL=....

where you can find the country, province, city, org and email values by looking at the 'ca.crt' file:

openssl x509 -subject -noout -in /etc/openvpn/keys/ca.crt

KEY_COUNTRY = /C=...
KEY_PROVINCE = /ST=...
KEY_CITY = /L=...
KEY_ORG = /O=...
KEY_EMAIL = /emailAddress=....