Page 1 of 1

openvpn connection

Posted: Tue May 17, 2011 3:07 pm
by xsurfer
currently I am using username and password to connect to server.

May I ask for a server and client configuration to connect to server only with the use of certificate so that I may try, study and implement it myself in my server and client configuration.

Thank you.

Re: openvpn connection

Posted: Tue May 17, 2011 8:46 pm
by janjust
just follow the howto:
http://openvpn.net/index.php/open-sourc ... l#examples

some work on your part is required.

Re: openvpn connection

Posted: Wed May 18, 2011 6:57 am
by xsurfer
I have already my configurations JanJust but it uses user/passwd authentication.

What I want to try is without user/passwd authentication but with certs only.

Kindly.

Re: openvpn connection

Posted: Wed May 18, 2011 7:10 am
by janjust
The HOWTO explains this quite nicely - did you read it?

on the server side it boils down to commenting out the user auth part (auth-user-pass-verify or some plugin)
on the client side you'd replace 'auth-user ....' by

Code: Select all

cert client.crt
key client.key
that's it. Instructions on how to generate client.{crt,key} are in the HOWTO as well, using the 'easy-rsa' script. The script you want is 'build-key'

Re: openvpn connection

Posted: Wed May 18, 2011 7:36 am
by xsurfer
yes I did read the howto Janjust.

If I am going to make the certs as login authentication, then it should be unique per user, right. So I need to create certs that is unique per client.

Re: openvpn connection

Posted: Wed May 18, 2011 10:13 am
by janjust
yes, that is recommended anyways, as it will allow you to distinguish between different clients/users.