tadrim Hi Everyone, Hoping you could help, I'm trying to update the key-sizes for the openVPN connections from the current 1024bit t 2048 bit, I'm trying to do it as seamless as possible so was thinking of setting up another instance using different port/proto and 2048bit keys. What would be the best way to do this? I want to keep the previous CA etc in place so the connections will still work while I'm moving everyone over but the build-ca script automatically names itself ca.crt so wants to overwrite the current one. What would the best method be? eventually the 1024 will be removed fully when everyone has moved over to the 2048 bit key. Thanks in advance.
Traffic tadrim wrotebut the build-ca script automatically names itself ca.crt so wants to overwrite the current oneEdit easyrsa vars file and use a new keys directory.
tadrim Hi Sorry, Ran into another problem, any idea how to resolve this? I get an error when i try to run the ./build-key-server: Using configuration from /etc/openvpn/easy-rsa/2.0/openssl-1.0.0.cnf wrong number of fields on line 1 (looking for field 6, got 1, '' left)
tadrim Hi There, Sorry could you give me a little more guidance on this one? I've edited the vars file line to the following : export KEY_DIR="$EASY_RSA/new/keys" Created the directory /etc/openvpn/easy-rsa/new/keys Ran the following cat /dev/null > index.txt then added a serial file and adding a number inside (the next one from the original serial file) Is there anything else I am missing? Thanks in advanced and thank you so far!
