How to use a 2048 bit key file ra

sudormf

I'm going a bit nuts trying to figure this out. I have an OpenVPN access server set up. When I connect to it, I see this output in my console:

Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA

1024 bit is not secure enough. I want to change this to 2048 bit. But I'm unable to find out how to do that. I've done extensive googling on this topic but wasn't able to find out the solution.

With pure OpenVPN, its a simple case of changing this setting in the config file, and running build-dh. But how can this be done with OpenVPN access server?

Any help would be greatly appreciated..

sudormf

I was able to do this with the help of 'Novaflash' from IRC:

1) Run the following script:

/usr/local/openvpn_as/scripts/sa --keysize=2048 Init

(Use sa -- help to see arguments)

2) This will generate new keys on the server. Then restart openvpn:

/etc/init.d/openvpnas restart

3) Finally, login to the client UI and re-download the .ovpn file as the client. And then, reconnect.