DokuWiki

This is an old revision of the document!

---

mkdir openvpn ; cd openvpn
# server key
openssl req -days 3650 -newkey rsa:2048 -keyout key -out request
openssl x509 -extensions v3_ca -days 3650 -CA ../ca/ca.pem -CAkey ../ca/ca.key -CAserial ../ca/serial.txt -req -in request -out server.crt
openssl rsa -in key -out server.key
rm request
# generate dh params
openssl dhparam -out dh2048.pem 2048
# create HMAC authentication key file
openvpn --genkey --secret ta.key
# create client keys
mkdir clients ; cd clients
for l in baldr hermodr hidden marduk slodmob srvli14 tina
do
	echo $l
	openssl req -days 3650 -newkey rsa:2048 -keyout $l.crp -out request
	openssl x509 -extensions v3_ca -days 3650 -CA ../../ca/ca.pem -CAkey ../../ca/ca.key -CAserial ../../ca/serial.txt -req -in request -out $l.crt
	openssl rsa -in $l.crp -out $l.key
done
rm request