Skip to content

Instantly share code, notes, and snippets.

@SumonMSelim

SumonMSelim/openvpn.md

Last active November 26, 2021 22:18
Show Gist options
  • Save SumonMSelim/aa7abb50ceea67eed1502fa189ed55f5 to your computer and use it in GitHub Desktop.
Save SumonMSelim/aa7abb50ceea67eed1502fa189ed55f5 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. SumonMSelim revised this gist Nov 26, 2021. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion openvpn.md
    View file
    Original file line number Diff line number Diff line change
    @@ -7,7 +7,7 @@ key: /home/sumon/openvpn/EasyRSA/pki/private/server.key
    #### CA: import request with server.req file

    ```
    ./easyrsa import-req /home/deploy/openvpn/server.req
    ./easyrsa import-req /home/deploy/openvpn/server.req server
    ```

    #### CA: perform signing operations on the request
  2. SumonMSelim renamed this gist Nov 26, 2021. 1 changed file with 6 additions and 0 deletions.
    6 changes: 6 additions & 0 deletions instructions.md → openvpn.md
    View file
    Original file line number Diff line number Diff line change
    @@ -1,3 +1,9 @@
    #### Server: Keypair and certificate request
    ```
    req: /home/sumon/openvpn/EasyRSA/pki/reqs/server.req
    key: /home/sumon/openvpn/EasyRSA/pki/private/server.key
    ```

    #### CA: import request with server.req file

    ```
  3. SumonMSelim created this gist Nov 26, 2021.
    30 changes: 30 additions & 0 deletions instructions.md
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,30 @@
    #### CA: import request with server.req file

    ```
    ./easyrsa import-req /home/deploy/openvpn/server.req
    ```

    #### CA: perform signing operations on the request
    ```
    ./easyrsa sign-req server server
    ```

    Output
    ```
    Certificate created at: /home/deploy/openvpn/EasyRSA/pki/issued/server.crt
    ```

    #### CA: transfer the signed certificate back to VPN server
    ```
    scp /home/deploy/openvpn/EasyRSA/pki/issued/server.crt [email protected]:/home/sumon/openvpn/CA/
    ```

    #### CA: transfer the ca.crt file to VPN server
    ```
    scp /home/deploy/openvpn/EasyRSA/pki/ca.crt [email protected]:/home/sumon/openvpn/CA/
    ```

    #### Server: copy the server.crt and ca.crt files into your /etc/openvpn/ directory
    ```
    sudo cp /home/sumon/openvpn/CA/{server.crt,ca.crt} /etc/openvpn/
    ```