mrozmiarek
Hello.
I have a problem, I lost the easy-rsa with the server certificates. Currently, I have no chance recovery tahat. I have file and CA.crt and user cert and key. Is it possible to recover it? :?:
ca /etc/openvpn/easy-rsa/keys/ca.crt # generated keys
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key # keep secret
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
Please help 🙁
TinCanTech
If you have lost your ca.key then start a new PKI from scratch.
mrozmiarek
old client can connect to new PKI?
TinCanTech
If you have lost your ca.key then your PKI is of no further use.
Your current VPN will continue to work but you cannot sign any new certificates.
mrozmiarek
OK but I don't have server.crt, server.key and dh1024.pem. So if I generate new PKI and config then old user connected to new VPN Server ?
TinCanTech
If you make a new PKI with a new server then your client will not be able to connect until the client has a new certificate and copy of the new ca.crt
mrozmiarek
ok. I have ca.key, how I can restore CA.crt?
TinCanTech
Every client and server using the same PKI has a copy of the ca.crt
