External PKI

bshiers

Anybody actively using an external PKI (namely Active Directory) for certificate creation/revocation? I'm running OpenVPN Community on Debian for the server and with a self-signed PKI right now and active directory LDAP auth. Would like to move all certificate chains/etc over to the domain as well for easier revocation/management.

Everything I've found seems to be outdated or I'm just lost and am not understandting it.

ShaneO

bshiers wrote Anybody actively using an external PKI (namely Active Directory) for certificate creation/revocation? I'm running OpenVPN Community on Debian for the server and with a self-signed PKI right now and active directory LDAP auth. Would like to move all certificate chains/etc over to the domain as well for easier revocation/management.

Everything I've found seems to be outdated or I'm just lost and am not understandting it.

I am also looking for similar answers. Help is appreciated

Thanks in advance.
Regards,
Shane

TinCanTech

Our resident gypsy says:

I will consult my crystal ball but first you must cross my palm with silver ...

Tromp

For each OpenVPN client, you will need to generate a certificate signed by the CA private key mcdvoice