lobi
Hi,
CentOS 6 used for server + ca, multi-OS clients.
Quick question(s?) that is more complicated than at first glance. I currently have my CA running on a separate server from the server running openvpn). I would like to move this CA to a new secure server, however I don't know which is the recommended practice:
Question 1) Is it possible to copy the entire contents of the /etc/easy-rsa folder to the new server (I am assuming this is possible as long as I source vars, which is what must be done every time I do anything with the CA anyway), then delete those files? And this will be sufficient to use without interruption?
Question 2) Given that this is in fact possible, why would this NOT be a recommended method (security reasons, config, etc)? Let us assume that the data transfer is done over a trusted secure channel.
Figured this quick post would be better off here than stackexchange. Also, my first post (and first time implementing openvpn). Hope this will help others with the same Q. Thanks.
