cosmic_cow Hey guys, I'm new to this whole networking thing, and I need to make some vpn keys for myself. I'm using OpenVPN/easy-rsa. I can use either Windows or Ubuntu, I have them installed on both. Anyway, the place I work for provides files paired up in the format *-ca.crt and *.ovpn for various servers, and the tutorials/how-tos have left me a bit confused as to what to do with them and how to use them to create my own keys. If this is the wrong place for this question, I apologize, and can repost, but it seemed the most appropriate. Thanks!
maikcat hi there, if they give you only a ca.crt and a config file (.ovpn) they probably will use user based auth not certificate based... can you post the client config? Michael.
cosmic_cow Here's one of them: client dev tap remote (IP address here) auth-nocache ca (name).crt port 443 remote-cert-tls server cipher AES-256-CBC cert YOUR_NAME.crt key YOUR_NAME.key We do use certificate based.
maikcat if you mean to generate a new certificate and be accepted by the openvpn server you must ask them to create one for you or create a csr , send it to them for signing and they will send it back to you. if you want to create everything from the scratch (new CA,certs) you can easily follow the howto docs located in community section -->docs. Michael.