Multiple configuration directories for certificates

grim76

I am missing something either it is not clicking from my reading of the docs, or my searching of the forums.

I can get an openvpn instance to do what I need it to do and connect etc. However, I am going to have multiple groups using the VPN server and would like them to have their own configuration.

I know that I can specify multiple .conf files and they will startup. What I need to do though is keep the keys and crt files for each group separate.

Something like /etc/openvpn/

/etc/openvpn/dev
user1.crt
user1.key
user2.crt
user2.key

/etc/openvpn/sysadmins
sysadmin1.crt
sysadmin1.key
sysadmin1.crt
sysadmin2.key

It will be much easier to maintain if I can separate these off since they will also be two distinct sets of VPN consumers.

Thanks

Grim76

Traffic

grim76 wroteWhat I need to do though is keep the keys and crt files for each group separate.

It sounds like you need two server instances.

grim76

Correct and that is what I would like to do. I have done that before, but I would like to have separate directories for the client certificates.

grim76

--cd dir
Change directory to dir prior to reading any files such as configuration files, key files, scripts, etc. dir should be an absolute path, with a leading "/", and without any references to the current directory such as "." or "..".

This option is useful when you are running OpenVPN in --daemon mode, and you want to consolidate all of your OpenVPN control files in one location.

Ok would this work where a configuration file that is in /etc/openvpn would only have cd /etc/openvpn/instance1 then all configuration and certificates for instance1 would be in there?

That way /etc/openvpn will only have configuration files for instances that point to the directories that are used for those instances.

Thanks

Grim76

grim76

I think I have figured out what will work for me.

Use a script to start up the instances and refer to each file location. That way I can have multiple instances running.