OpenVPN Support Forum

I have a Debian Server with openvpn configured and different clients already running.
I have tried to create new clients with pkitool, and it's tell me that I need a ca.crt (I have it) and a ca.key (I cann't find it).

I have tried creaiting a new ca.crt and ca.key before, but it's doesn't run.

Could someone helps me.

Thanks.

to create a new cert and sign it with your EXISTING ca you MUST have ca.key file (among others)

if you deleted ca.key you can create a new CA from scratch,
but this will render your existing certs unusuable...

files you need to keep are:

ca.key
index.txt
serial.txt
vars.bat

Michael.