Dfuerpo
I am somewhat new to OpenVPN and couldn't find the answer to this question. I setup a test OpenVPN server on Ubuntu server 16.04 using the excellent guide on digitalocean.com. After working through some problems with differences in the .ovpn file for the iOS client vs the Mac Viscosity client, every thing is working. I now want to move to a production server. I see a lot of explanations on moving the server by copying /etc/openvpn files, but I want to move the EasyRSA PKI to another machine for future certificate management, possibly on an encrypted disk partition or disk image.
The guide I followed used make-cadir to create a a ~/openvpn-ca directory which has pointers to the scripts in /usr/share/easy-rsa. So, how do I move the existing PKI to another machine? Do I just copy ~/openvpn-ca/* and ~/client-configs/* to the new machine? Are there any pointers in config files that need to be changed? What if I don't have it under the home directory (~) but on another encrypted mounted volume which will be under /Volumes?
Any help is greatly appreciated.
