I setup OpenVPN on a Amazon EC2 instance in my VPC using the HOWTO on the website. The only change I have made is to authenticate users via RADIUS. I would like to increase security beyond only a username/password combo, but I am not sure how to accomplish this task. The guide I followed mentioned nothing about certificates or anything, so I am unsure of how it is actually setup.
I have read the guide at:
http://openvpn.net/index.php/open-source/documentation/howto.html#security and there are a few things that I would like to try, but the information is not very detailed.
Here is where I am having trouble:
1. Where is the server configuration file located in Linux?
2. How will my clients know where to put their configuration files for their Windows and Mac clients?
tls-auth security measure - once I create the key, where do I put it on my linux server and local windows/mac clients?
proto udp - If I add this directive, are the clients affected?
larger RSA keys - I would like to change the KEY_SIZE to 2048 in the easy-rsa/vars file,
I am not sure where that file is?
How would I update any existing keys?
Larger Symmetric keys - I would like to change to: cipher AES-256-CBC
I am unsure how this will affect the current setup?
Custom certificates for each client
How do I create these files?
Where do the files go on the server?
Where do the files go on the client?
Please excuse my n00b-ness. Hopefully I am at least asking the right questions?!
Any help greatly appreciated!
