danb Hello! The company I work for has a few OpenVPN servers used by over 200 employees. The servers were deployed a few years ago using the default easyrsa settings and now we want to upgrade to stronger encryption and authentication. Is it possible to change the 1024-bit CA seamlessly, like issuing a 2048-bit CA and sign it with the old one? thank you in advance
maikcat hi there, Is it possible to change the 1024-bit CA seamlessly, nop you can deploy a second vpn instance using different port/proto and 2048bit keys. you still need to generate and distribute new certs... Michael.
