Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
tools:ovpn [2022/08/15 13:31] – [Certificate Store] darron | tools:ovpn [2022/08/28 12:59] (current) – [OpenVPN] darron | ||
---|---|---|---|
Line 4: | Line 4: | ||
authentication. | authentication. | ||
+ | TBC | ||
===Install=== | ===Install=== | ||
Line 96: | Line 97: | ||
==Create TA Certificate== | ==Create TA Certificate== | ||
- | TODO determine if not superceded. | + | Shared secret key. |
< | < | ||
openvpn --genkey secret pki/ta.key | openvpn --genkey secret pki/ta.key | ||
</ | </ | ||
+ | |||
+ | Example configuration on server. | ||
+ | |||
+ | < | ||
+ | tls-server | ||
+ | tls-auth ta.key 0 | ||
+ | </ | ||
+ | |||
+ | On the client, the shared secret may be inline in the connection profile. | ||
==Create Client Certificate== | ==Create Client Certificate== | ||
< | < | ||
- | ./easyrsa --vars=./ | + | ./easyrsa --vars=./ |
</ | </ | ||
- | ==Bundle | + | ==Bundle |
< | < | ||
Line 114: | Line 124: | ||
</ | </ | ||
- | ==Unbundle | + | ==Unbundle |
< | < |