OpenVPN: Difference between revisions
From Elch-Wiki
Jump to navigationJump to search
No edit summary |
No edit summary |
||
| Line 11: | Line 11: | ||
** ./easyrsa gen-dh | ** ./easyrsa gen-dh | ||
** Create P12 File from client certificate: openssl pkcs12 -export -in easyrsa3/pki/issued/animal_vpn_c1.crt -inkey easyrsa3/pki/private/animal_vpn_c1.key -out animal_vpn_c1.p12 | ** Create P12 File from client certificate: openssl pkcs12 -export -in easyrsa3/pki/issued/animal_vpn_c1.crt -inkey easyrsa3/pki/private/animal_vpn_c1.key -out animal_vpn_c1.p12 | ||
= Neues Client-Cert erstellen = | |||
* root werden | |||
* nach /etc/openvpn/easyrsa3 wechseln | |||
* ./easyrsa build-client-full animal_vpn_c2 <-- Name inkrementieren, PW aus PW-Safe | |||
* Create P12 File from client certificate: openssl pkcs12 -export -in easyrsa3/pki/issued/animal_vpn_c2.crt -inkey easyrsa3/pki/private/animal_vpn_c2.key -out animal_vpn_c2.p12 <-- export PW leer lassen | |||
Revision as of 20:27, 16 April 2018
- Installation gemäss http://www.susegeek.com/security/install-configure-openvpn-ssl-vpn-in-suse-opensuse-linux/
- Anderes Howto: https://openvpn.net/index.php/open-source/documentation/howto.html
- OpenVPN mit Yast installiert
- easy-rsa
- Download von https://github.com/OpenVPN/easy-rsa geholt und nach /etc/openvpn entpackt
- vars.example nach vars kopiert und editiert
- ./easyrsa init-pki
- ./easyrsa build-ca (passwords in password-safe)
- ./easyrsa build-server-full animal_vpn
- ./easyrsa build-client-full animal_vpn_c1
- ./easyrsa gen-dh
- Create P12 File from client certificate: openssl pkcs12 -export -in easyrsa3/pki/issued/animal_vpn_c1.crt -inkey easyrsa3/pki/private/animal_vpn_c1.key -out animal_vpn_c1.p12
Neues Client-Cert erstellen
- root werden
- nach /etc/openvpn/easyrsa3 wechseln
- ./easyrsa build-client-full animal_vpn_c2 <-- Name inkrementieren, PW aus PW-Safe
- Create P12 File from client certificate: openssl pkcs12 -export -in easyrsa3/pki/issued/animal_vpn_c2.crt -inkey easyrsa3/pki/private/animal_vpn_c2.key -out animal_vpn_c2.p12 <-- export PW leer lassen
