Page 1 of 1

Where's the database from generated keys ?

Posted: Tue Dec 07, 2010 5:14 pm
by sierramike
Hi,

I'm using OpenVPN on Debian for a while now, and now I need to move it to another Debian box. I remember when I created the keys for the clients, the script told me they were commited to a database.

What config files and database files do I need to move to the new box so I can keep all the config up and running within minutes ?

Many thanks by advance ...

Re: Where's the database from generated keys ?

Posted: Wed Dec 22, 2010 8:12 pm
by gladiatr72
Hello,

Well, with an OpenSSL CA, you're going to have 4 things you'll want to preserve:

. openssl.cnf (if you customized it at all)
. your keys and certs (including your ca.crt/key files)
. serial (this is just a running counter of the last index used in...)
. index.txt (keeps a list of your certs and is used to verify uniqueness of the certificate Subject and whether or not they've been revoked)

That's really it unless you're using a fancier method of maintaining your CA than I am :)

Regards,
Stephen

Re: Where's the database from generated keys ?

Posted: Wed Dec 22, 2010 10:09 pm
by sierramike
Thanks for the reply, I think I'll give it a try with your tips and see what happen !

Hope I'll find the time withing Christmas days ...