User Tools

Site Tools


Writing /var/www/html/john.de-graaff.net/webroot/wiki/data/cache/e/ed44f1c115d853af346d9b457c93818d.metadata failed
links:openvpn
Writing /var/www/html/john.de-graaff.net/webroot/wiki/data/cache/b/bf111e76e59a388c9525e3ec822a9d12.xhtml failed

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
links:openvpn [2016/04/24 13:29]
jdg [Generate CA cert/key]
links:openvpn [2019/03/06 07:33] (current)
Line 208: Line 208:
  
  
-==== Set the paramters ​first ====+==== Set the parameters ​first ====
  
 <​code>​ <​code>​
Line 242: Line 242:
  
 <​code>​ <​code>​
-#!/bin/sh+#!/bin/bash
 # run this script to generate "​openssl.cnf"​ using the previously exported values # run this script to generate "​openssl.cnf"​ using the previously exported values
 # #
Line 305: Line 305:
  
 [ req ] [ req ]
-default_bits = 1024+default_bits = 2048
 default_keyfile = privkey.pem default_keyfile = privkey.pem
 distinguished_name = req_distinguished_name distinguished_name = req_distinguished_name
Line 376: Line 376:
  
 <​code>​ <​code>​
 +# note: we don't need '​-newkey rsa:2048 ' because config-file.default_bits = 2048
 +
 cd $tls_cert_dir/​ ; cd $tls_cert_dir/​ ;
 /​usr/​bin/​openssl req            \ /​usr/​bin/​openssl req            \
-  -days 3650 -nodes ​-newkey rsa:​2048 ​-new -x509  \+  -days 3650 -nodes -new -x509  \
   -keyout "​$tls_ca_CN.key" ​     \   -keyout "​$tls_ca_CN.key" ​     \
   -out "​$tls_ca_CN.crt" ​        \   -out "​$tls_ca_CN.crt" ​        \
/var/www/html/john.de-graaff.net/webroot/wiki/data/attic/links/openvpn.1461497342.txt.gz ยท Last modified: 2019/03/06 07:33 (external edit)