Gave my first try with 2.5 this morning with rc2. Made absolutely sure I selected all install options except for the GUI utility which I don't want on a server. Right off the bat trying to generate keys with [url=https://openvpn.net/community-resources/how-to/#setting-up-your-own-certificate-authority-ca-and-generating-certificates-and-keys-for-an-openvpn-server-and-multiple-clients]the instructions[/url] I've used many times before and the scripts I'm looking for are not to be found. I looked around and found the [url=https://openvpn.net/community-resources/how-to/#setting-up-your-own-certificate-authority-ca-and-generating-certificates-and-keys-for-an-openvpn-server-and-multiple-clients]same instructions[/url] in the 2x HOW TO and they start off the same way, but the scripts mentioned are missing.

You have installed EasyRSA-3 not version 2. Once you have EasyRSA working you can also try [url=https://github.com/TinCanTech/easy-tls]EasyTLS[/url]

[quote=maxburn post_id=94878 time=1602588668 user_id=38975] Gave my first try with 2.5 this morning with rc2. [/quote]RC2 means it is a test version not a full release. 2.5 now ships with EasyRSA-3, which has it's own web site: https://github.com/OpenVPN/easy-rsa

2.5rc2 missing easyrsa init.config, vars, clean-all, etc scripts

maxburn

Gave my first try with 2.5 this morning with rc2. Made absolutely sure I selected all install options except for the GUI utility which I don't want on a server. Right off the bat trying to generate keys with the instructions I've used many times before and the scripts I'm looking for are not to be found.

I looked around and found the same instructions in the 2x HOW TO and they start off the same way, but the scripts mentioned are missing.

TinCanTech

You have installed EasyRSA-3 not version 2.

Once you have EasyRSA working you can also try EasyTLS

maxburn

Thanks, I didn't read carefully enough. From the 2x page a little further up from where I usually start reading;

For PKI management, we will use easy-rsa 2, a set of scripts which is bundled with OpenVPN 2.2.x and earlier. If you’re using OpenVPN 2.3.x, you need to download easy-rsa 2 separately from here.

For PKI management, we will use easy-rsa 2, a set of scripts which is bundled with OpenVPN 2.2.x and earlier. If you’re using OpenVPN 2.3.x, you may need to download easy-rsa 2 separately from the easy-rsa-old project page. An easy-rsa 2 package is also available for Debian and Ubuntu in the OpenVPN software repos. On *NIX platforms you should look into using easy-rsa 3instead; refer to its own documentation for details.

TinCanTech

maxburn wrote Gave my first try with 2.5 this morning with rc2.

RC2 means it is a test version not a full release.

2.5 now ships with EasyRSA-3, which has it's own web site: https://github.com/OpenVPN/easy-rsa

maxburn

Thanks, yes I was checking things out and seeing what I need to change in my processes to move up to the 2.5+ versions eventually coming out. Also just found this doc re EasyRSA-3. https://community.openvpn.net/openvpn/wiki/EasyRSA3-OpenVPN-Howto

I can see how that's more secure but it's a big process departure from EasyRSA-old. Also potentially a problem when my VPN client is a Ubiquiti Edgerouter. I'll have to give it a try.

TinCanTech

EasyRSA-3 can upgrade your EasyRSA-2 PKI .. Please make a full backup first.

Then, give it a shot!

Let me know how you get on 8-)