[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

[Openvpn-users] Re: New beginner tutorial on using OpenVPN with certificates


  • Subject: [Openvpn-users] Re: New beginner tutorial on using OpenVPN with certificates
  • From: "Neal D. Becker" <ndbecker2@xxxxxxxxxxx>
  • Date: Wed, 11 Aug 2004 07:34:31 -0400

Scott Brumbaugh wrote:

> Hi,
> 
> I have written an article/tutorial covering how to setup OpenVPN using
> certificates managed by OpenSSL.  The article is very basic and the
> tutorial goes through all of the commands needed to get a client
> talking to a single instance server:
> 
>     o Create a self-signed root certificate.
>     o Create client/server certificates.
>     o Verify the certificates using OpenSSL test tools.
>     o Setup OpenVPN using certificate authentication.
>     o Setup and test a CRL.
> 
> I wrote this after figuring it out using a lot of different sources on
> the net.  This article tries to explain all the fundamentals in one
> place for a beginner.  Maybe this will help people just starting out,
> feedback welcome.
> 
> Find the article at:
> 
>       http://www.inyotech.com/vpn_infrastructure.php
> 
> 
Thanks!  This is a great start.  Some problems:

[admin@tamarack CA-DB]$ echo "01" | cat > serial
[admin@tamarack CA-DB]$ touch index.txt
[admin@tamarack admin]$

It appears you did "cd", but you don't say so.  I can't tell what dir you're
in when you're running the subsequent commands.

The next step won't work at all, unless you either edit the default system
openssl.cnf (/usr/share/ssl/openssl.cnf on Linux Fedora core 2) to change
"dir" or copy openssl.cnf to "./", and edit:

dir             = /home/nbecker/CA-DB/          # Where everything is kept

Later on, it says:
"After creating the server certificate we can go about creating certificates
for all of the clients that we want to give VPN access to as well."

OK, but how?  Example?


____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users