Re: Limit the number of users based on the key
Peter Davis via Openvpn-users <[email protected]>
| Newsgroups | gmane.network.openvpn.user |
|---|---|
| Message-ID | <5GwW10-ThYs-AzDYrH8pStzXIGF35s2yCXAU1kR49uqdcB_udkOlOlkkGNZMzQZnF-xqrgKZqrE15vU1LFGB6-VdcXEGCJ4UL2RtYmCp8b8=@proton.me> |
>On Monday, January 15th, 2024 at 5:14 PM, Gert Doering <[email protected]> wrote: > Hi, > > On Mon, Jan 15, 2024 at 08:41:16AM +0000, Peter Davis wrote: > > > Yes, but shouldn't you copy the following files for each client? > > > > # cp pki/ca.crt /etc/openvpn/client/ > > # cp pki/issued/client.crt /etc/openvpn/client/ > > # cp pki/private/client.key /etc/openvpn/client/ > > > No. These files do not go anywhere on the CA (easyrsa) machine. They need > to go to the client machine that needs them, and nowhere else. > > > And create an .ovpn file for each client with the contents of the above files! > > > This is what you do. > > gert > -- > "If was one thing all people took for granted, was conviction that if you > feed honest figures into a computer, honest figures come out. Never doubted > it myself till I met a computer with a sense of humor." > Robert A. Heinlein, The Moon is a Harsh Mistress > > Gert Doering - Munich, Germany [email protected] Hi, Thanks again. So, if the client's keys are not present in the OpenVPN server, then the client can connect to the server? If so, why is there a directory named "client" under /etc/openvpn/ directory?