Hi all,
We have been running an openvpn server (on CentOS5) for a while, which was built by a third (and long-gone) party. I am ok-ish with linux but not really VPN stuff and I have just come to try and understand how it works (originally to work out how to revoke certificates).
To aid my understanding, I would very much appreciate some comments regarding the following:
1) Why are there multiple CRL files, when surely one would do?
[root@mail1 ~]# cd /etc/openvpn
[root@mail1 openvpn]# find ./ -name "*crl.pem"
./crl.pem
./server-crl.pem
./keys/crl.pem
2) There is an easy-rsa directory containing many scripts, then there is a '2.0' subdirectory containing scripts with identical names, not executable and whose code looks similar but not identical. Should I be setting the '2.0' scripts as executable and using this for admin tasks?
[root@mail1 openvpn]# cd easy-rsa/
[root@mail1 easy-rsa]# ls
2.0 build-inter build-key-pkcs12 build-req-pass list-crl openssl.cnf.24-Sep-2012 revoke-crt test.sh
build-ca build-key build-key-server clean-all make-crl openssl.cnf.ORIGINAL revoke-full vars
build-dh build-key-pass build-req ej-revoke openssl.cnf README sign-req Windows
[root@mail1 easy-rsa]# cd 2.0
[root@mail1 2.0]# ls
build-ca build-key build-key-server clean-all Makefile pkitool sign-req
build-dh build-key-pass build-req inherit-inter openssl-0.9.6.cnf README vars
build-inter build-key-pkcs12 build-req-pass list-crl openssl.cnf revoke-full whichopensslcnf
I appreciate that, as this was built by a previous party, the setup may not be standard, but if you could advise either way, it would help me very much 🙂
Thanks for reading.
Elliot
