Re: what keys/certificates I as a openvpn client need to generate?

tincantech via Openvpn-users <[email protected]> Mon, 17 Jun 2024 21:45:39 +0000

Newsgroups	gmane.network.openvpn.user
Message-ID	<8O0R0z-9g9fBPtSqMbtCXuvrigem-0_Kw4oNqAUyXPgOVxjDtQansrhY--PT2GtQL1tw6hyymG9p1AtcGxdB5qoeecpbupV42ZDHzvwBJc4=@protonmail.com>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

On Monday, 17 June 2024 at 21:33, Mika Laitio <[email protected]> wrote:

> Hi, this is my first time in this list.
> 
> This may be too simple a question, but I did not find a clear answer when googling and reading the README.quickstart.md. All the examples I found were more concentrated for the server side setup.
> 
> So I would need to be connected to an openvpn server not hosted by me and the owner of the server asked me to send my credentials for the server key.


Your "owner of the server" must clarify "send my credentials".


> At the moment I do not know the name of the server, ca-files of it or anything. I believe that once I send my public key, he can then generate the configuration file for me that I can use to connect to the server. (.opni)
> 
> Can I just use openssl to generate a public-private key pair and then just send the generated public key for the openvpn server maintainer or do I need to use the easyrsa3/easyrsa to generate the keys that openvpn can use? If I need/can use the easyrsa3 to do that, are there any examples/docs for the commands I need to use?


You can do this with OpenSSL but it is not easy.

You can do this with Easy-RSA and it is easy.

Install Easy-RSA then use the following commands:

$ easyrsa init-pki
$ easyrsa gen-req <NAME>

If you prefer, you can make this even easier by not protecting your private key with a password:

$ easyrsa gen-req <NAME> nopass

Which ever method you prefer, you then send the certificate signing request [CSR] to the server owner.

The CSR can be found in your Easy-RSA PKI folder as: pki/reqs/<NAME>.req

That is all you can do until the server owner sends you back your signed certificate and config file.

Regards
tct


-----BEGIN PGP SIGNATURE-----
Version: ProtonMail

wsBzBAEBCAAnBYJmcK50CZBPl5z2a5C4nRYhBAm8PURno41yecVVVU+XnPZr
kLidAADQHggAqTt/HQVdlVjklq7WAUnBIVnr31MfuTuP7OtdfijQpL453vhC
qT4fDVdeDE6EQJ/82WrSjwf8NZCvKhn2Kh07Ef7BvgT8kAIEYT9vXBoSsUoA
DCSksmdeLHJbtBihZIg04LpXxhF2NaBTVt3Oxm5QHUnNIUwS0gmxHSGEsJ3S
mL5q4fyJJnrmz3dmyCFZc5ixa6eHe2CKHrRluzQIpcx4mHOF4Ieuv6Lfka3A
oYA2zR63jtZj+E3XyhB/ZGkhBAkde5y1J3aGQuTBu38iIxBzUNVHqeP9JS/7
/Zjy2Kma8skFAFL09w2iTwUEgIiUCbPGjfacAPZWQODprUyuzLjX/g==
=Gw4Z
-----END PGP SIGNATURE-----

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

publickey - [email protected] - 0x09BC3D44.asc (application/pgp-keys, 1.7 KB)

publickey - [email protected] - 0x09BC3D44.asc.sig (application/pgp-signature, 310 B) - not displayed