Seperate Certificate Issuer machine and OpenVPN server

[BETELGEUSE58]

Hi

I have a local machine used for generating new client keys and certificates.

I have a remote server running as the server for connecting to.

Question is, when I generate a new client files (locally) what do I need to copy to the server (remote machine I want new client to connect to) for it to recognise them as a genuine client?

Is all I need the CA.crt file placed on the server for it to recognise new client? Or are there other files that will need to be copied to the server also?

Thank you

[maikcat]

hi there,

i always leave on server only
ca.crt
server.crt
server.key
ta.key
dh1024.pem

nothing more...

if you keep all the key files (+vars etc) in one pc yes you can generate keys that work...
also keep index.txt and serial files..

ps:NEVER leave ca.key on server

Michael