what files to keep on the server

jbodhorn

I've been working towards setting up openvpn using tls, I failed outright a few time before coming here for some input and being told I need to read more, I still do. I'm having trouble finding some info and would like to be pointed to the right direction, links to what I would need to read would be great. I need to learn more about the files being generated so I can figure out where they go and why....

I've seen very clearly instructions for client files(from the openvpn site: Copy the ca.crt, clientname.crt, clientname.key from Server to Client /etc/openvpn/easy-rsa/keys/ directory.). What about .ovpn files, they are needed for all clients no matter what OS, correct? They go in the same place as the other client files copied from the server?

I'm not so sure about are what files stay on the server, which get deleted, and if any get moved which and where do they go. I must be over looking this, I've read a few tutorials now, maybe it's just all blurring together... I don't recall seeing any of the .pem, .crt, or .key files being moved(other than the files for the client getting moved to the client) on the server, do they stay, go, get moved? What about the server.conf does it stay in the /etc/openvpn folder I created it in?

On the original tutorial I went by(and failed...) there was a step to make .ovpn files for the client, it was done with ./MakeOVPN.sh which was made from a script I was told to copy and paste into a blank file that was made excutable. Since I started reading on this site in the tutorials here I haven't seen the making of a .sh file to generate the .ovpn files. Are there other ways to generate these files?

This here: https://openvpn.net/index.php/access-server/docs/admin-guides/182-how-to-connect-to-access-server-with-linux-clients.html
wasn't helpful, there seems to be quite the gap in the instructions lol. I do understand this is because that part is part of the server setup, where do I find that info on this site? I've been reading this: https://wiki.debian.org/OpenVPN atm since I'm working with raspbian on a RPi for a server

Having not seen how the .ovpn files on this site I feel like I'm missing a big chunk of something I should have read, can someone give me a link to some info about these files? I guess I'd like to know different ways they can be made and how the server/clients use them.

jbodhorn

I think I've seen ovpn files mentioned for android, iOS, windows, and linux, do they all use them? Something I read had made me think that a client.conf in linux and a client.ovpn in windows do the same thing, is this true? My main goal atm is to fully understand what the ca.crt, client.crt, client.key(Client1.3des.key), ta.key, secret.key, static.key, and client.ovpn files all are and do and where they go and in what circumstances they are used or not

Traffic

Have you read this ?
HOWTO: For OpenVPN Community Edition

jbodhorn

I had read bits and pieces, I found the sample config files for server and client a few days ago, they helping a lot. I never bothered to look at them cause I figured they'd be like the sample config I had been working off of, had almost all of the comments removed, the samples here are much more detailed. Those comments are helping me a lot, I read through them both, now I'm reading through making my server config. Even if it doesn't work I think I'll be able to get a little further, now I know how to test the vpn and look at log files, plus I know my network is set up right and port forwarding is properly working. Was having some trouble with DDclient but I'm pretty sure it's taken care of. I'm all set for NAS, right now since I don't have power for my hub I only have a 64gb flash drive plugged in into the back of my pi, but it is network accessible. I have 3 x 1tb drives waiting for a powered hub(s) end of the month I'm getting a class 10 64gb micro sd card(maybe a few...), a few powered hubs, and possibly a leaning tech sx300 expansion board