dreville
I have a not too familiar with SSL certificates so this may be a very noob question to you.
I have an OpenVPN setup that has been running as expected for over 6 months. It's running over a tun device and through the default UDP 1194 port
I have a self-signed CA certificate, ca.crt, that I generated during the OpenVPN setup which I include along with the client.crt, client.key, and ta.key for client set up.
At the moment, the client connects to a static IP which then "port forwards" 1194 to the internal OpenVPN server. I find this inconvenient, so I plan to assign a static IP to the OpenVPN server with a subdomain (remote.*) pointing to it which can be resolved externally.
Due to port 1194 being blocked, I'm also considering running OpenVPN on TCP 443, which is also the port used for HTTPS.
Would you recommend that I purchase a SSL certificate from a valid CA for that subdomain?
Thank you for your help.
dreville
I appreciate the reply debbie10t, thank you!
I'm assuming the EASY-RSA-generated cert will suffice even if I enable additional user login authentication via LDAP/AD.
The login credentials will be sent encrypted?
