phille05 Hello, Probably my question has been handled before, I tried searching but couldn't find any previous threads I want to use 1 signle server to terminate all possible connection, for example I want developpers to have unconditional access to any server internally, but other servers have to be restricted to allow only 1 server on 1 specific port My current solution is to have 2 server instances running on 2 different ports using 2 different IP Nat address ranges, using those ip addresses I can tune restrictions using iptables ! But this method is easely ommited if the user logs into the server on the other port How can I disallow a user to use his cert/key on an instance ? Should I generate a different CA for each instance used ? Is this possible ?
TinCanTech phille05 wrote Should I generate a different CA for each instance used ? Is this possible ? That is one way .. Start here: HOWTO: For OpenVPN Community Edition