Hello,
Since now I had OpenVPN running on a Linux Server using PKCS11 PKI with Standard SmartCards (Windows Clients).
Currently I am trying to move to using OpenPGP and the PGP Smart Card as a replacement for the old system which is quite complicated to maintain (OpenSSL commands, etc...)
Q: Is there a good and complete tutorial on how to set up OpenVPN Server and Client using OpenPGP?
Currently I have the following:
- Certification Authority is stored on a Smart Card (Gemalto)
- Server Key+Cert is on the server Filesystem
- OpenVPN + OpenVPN Manager GUI on Windows Client tu connect using Smart Cards (Gemalto)
- Configuration is awfully complicated due to OpenSSL...
All this shall now be done using OpenPGP whilst making use of the PGP Smart Cards.
Another question...
Q: Is there a way to store and use the Server Key and Certificate on a Smart Card (USB Token) instead of having it on the disk?! This would increas he security as none could copy the server key and make use of it...
