When issuing a certificate, press Enter in the Common Name column.
Key: /etc/openvpn/easy-rsa/3/pki/private/ Keypair and certificate request completed. If you enter '.', the field will be left blank.Ĭommon Name (eg: your user, host, or server name) : There are quite a few fields but you can leave some blankįor some fields there will be a default value, What you are about to enter is what is called a Distinguished Name or a DN. You are about to be asked to enter information that will be incorporated Writing new private key to '/etc/openvpn/easy-rsa/3/pki/private/.R4IYCbD1zP' easyrsa gen-req nopass Note: using Easy-RSA configuration from. You can specify any data in the file, it will not influence the configuration and further operation of the server.Ĭreate a server key (the server name is ): Set_var EASYRSA_SSL_CONF "$EASYRSA/openssl-1.0.cnf" Set_var EASYRSA_EXT_DIR "$EASYRSA/x509-types"
Set_var EASYRSA_NS_COMMENT "CERTIFICATE AUTHORITY" Set_var EASYRSA_REQ_EMAIL EASYRSA_REQ_OU "IT dept" Go to /etc/openvpn/easy-rsa/3/ and create the vars file there:Īdd the file contents (you can modify the config according to your needs): set_var EASYRSA "$PWD" # cp -r /usr/share/easy-rsa /etc/openvpn/
# yum install openvpn easy-rsa -y How to Configure Easy-RSA and Generate X.509 Certificates?Ĭopy all easy-rsa scripts to /etc/openvpn/:
0 kommentar(er)
