Hello there. I've problem with the existing OpenVPN server config on the Debian 5.5 firewall which is also a mail Gateway running ssl postfix-clamav-spamasassin. As I'm a new admin here the existing configs, scripts etc made by the former admin are still a bit tricky for me. The problem seems to be a trivial one, but I'd like to ask the community before my firewall stops;)
The openvpn 2.1 is running and configured so far.
port 1194
proto udp
dev tun
ca /etc/openvpn/ca_temp.pem
cert /etc/openvpn/fw-cert.pem
key /etc/openvpn/fw-key.pem
dh /etc/openvpn/dh1024.pem
ifconfig-pool-persist ipp.txt
push "route 10.10.1.0 255.255.255.0"
push "route 10.10.x.0 255.255.255.0"
client-config-dir ccd
push "dncp-option DOMAIN mydomain.com"
push "dhcp-option DNS 10.10.1.x"
push "dhcp-option WINS 10.10.1.x"
duplicate-cn
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
The CA and all the server/client keys have been (if at all) configured in the past, I don't know the passwords, names, how the keys have been configured.
When I create new CA, new certs for the openvpn server/clients, will the running ssl config of my postfix affected? In other words, when I generate my CA and keys will break something in my mailserver ssl config or not?
Thanks for answer.
