Moul
I set up a OpenVPN server a few years ago and had it up and running smoothly with around 10-15 clients. No problems with the set up whatsoever. One day I went to make a new key for a new client, and mistakenly did a ./clean-all
Now this cleared all the keys that were saved on the /openvpn/easy-rsa/keys folder. I thought that I would have to rebuild all the keys, client and server, but found that even after the ./clean-all, all the clients were still able to successfully connect. So I ignored it and moved on and created a new client key as usual. However, using this key did not work (authentication errors). I then tried to create a new ca.crt and ca.key, but new keys still do not work, but the old ones still do. The only ca.key file I can find on the server is in the /openvpn/easy-rsa/keys folder, and the old one has been permanently lost. It confuses me why the old keys would still work then, since I have no more client.key files (to my knowledge), nor the right ca.crt for the ca.key on the server. The new ca.crt generated does not work for the clients. I have not changed the server.key/crt/csr
At this point I'm stuck with the old client keys working, but I can't add anymore new clients. I need to be able to rebuild the whole key/certificate infrastructure, or somehow get newly generated client keys working.
I want to restor the all old certificate how can i do ??
300000
It is better to use XCA to create certificate and it have gui to use as easy as it should be. when you want to management over 100 certificate you will find out gui is must have than commandline .
/clean-all is only clean database certificate so you cant revocation that old certificate at all it mean if one client you dont want to connect to your openvn server you can use revocation to block it and now you cant but your old certificate still working as when you set up.
