create client certificate

faludigabor

Hi all,

I have taken over a live OpenVPn server. The server runs ok with TLS certificates.

I would need to create and sign a new certificate to be accepted by openvpn server.

There was no existing EasyRSA installed .

I seem to have a static key plus these files :
-ca.crt
-crl.pem
-dh.pem
-ta.key
-vpn.crt
-vpn.key

Can someone suggest me how should I create a new cerificate file for a new client please ?

tx,
gabor

Traffic

faludigabor wroteI seem to have a static key plus these files

You must find the ca.key file to use your current PKI.

Note: If you cannot find the ca.key file then you must create a new PKI from scratch.

faludigabor wroteThere was no existing EasyRSA installed

You don't need to install EasyRSA .. you can download it here:
https://github.com/OpenVPN/easy-rsa/releases

If you are using windows to create your certificates you must use this version:
https://github.com/OpenVPN/easy-rsa/releases/tag/v3.0.0-rc2