nails
OpenVPN Client I use CA certificate connected OpenVPN Server.
I want to achieve, each of the 1 client certificate, specify which 1 computers can be used, since on other computers to use the client certificate, was unable to connect to the OpenVPN Server.
Please tell us whether OpenVPN has this feature, development or later, can increase the function of VPN, with the greatest degree of safety and security.
nails
I have been achieved through the easy-rsa PKI, generating 1 certificates for each of the 1 users.
Build-ca
Build-key-server server
Build-key client1
Build-key client2
Build-key client3
Build-dh
But I hope to achieve is the maximum security, 1 computers, 1 Certificate limits defined.
For example: client1 certificate can only be used for the computer A, copy the certificate to the other computer B, limit it
cannot log on the B computer.
How to achieve?
Server configuration file server.conf
[root@VPN etc]# cat server.conf | grep -v "#" | grep -v ";" | grep -v ^$
port 9999
proto tcp
dev tun
ca /usr/openvpn/easy-rsa/2.0/keys/ca.crt
cert /usr/openvpn/easy-rsa/2.0/keys/server.crt
key /usr/openvpn/easy-rsa/2.0/keys/server.key
dh /usr/openvpn/easy-rsa/2.0/keys/dh1024.pem
server 10.10.10.0 255.255.255.0
ifconfig-pool-persist /usr/openvpn/etc/ipp.txt
crl-verify /usr/openvpn/easy-rsa/2.0/keys/crl.pem
push "route 172.16.61.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status /usr/openvpn/etc/openvpn-status.log
verb 3
OpenVPN Client Configure File client.ovpn
client
dev tun
proto tcp
remote 180.96.x.x 9999
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
ns-cert-type server
comp-lzo
verb 5
