So I got it up and running thanks to your tutorial and you helping me troubleshoot, have to thank you @dariusz, the openssl not working properly was very obscure, I was likely never to have got it working without your help, thanks !
One more thing though, why is your output longer than mine?
Your keys I mean, they are longer than mine, is there something I could do in vars to fix it? Maybe increase key size or something? But this isn't RSA where you could simply change the export KEY_SIZE=4096 (as far as I understand it)
Your ca.crt for example:
Code: Select all
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Mine?
Code: Select all
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
What should I do to make it as long (or longer) as yours?
My older config using RSA 4096 had longer outputs...
EDIT:
When you are happy with results you can tinker with systemd or initd to make 2.4 your default autostart option.
Can you explain how to tinker with the systemd or initd to make it default to 2.4.x? Or is this out of scope for this thread and I should ask this question in another forum?