## Renew Server Key
In CA Server
```
cd ~/EasyRSA-3.0.4/
sudo ./easyrsa gen-crl
sudo cp /home/causr/EasyRSA-3.0.4/pki/crl.pem /etc/openvpn/crl.pem
```
Restart vpnserver
```
sudo systemctl restart openvpn.service
sudo systemctl status openvpn.service

```
## Generate client key

In VPN Server
```
cd ~/EasyRSA-3.0.4/
./easyrsa gen-req client1 nopass
cp pki/private/client1.key ~/client-configs/keys/
scp pki/reqs/client1.req causr@ca_ip:/tmp

```


In CA Server
```
cd ~/EasyRSA-3.0.4/
./easyrsa import-req /tmp/client1.req client1
./easyrsa sign-req client client1
scp pki/issued/client1.crt sammy@your_server_ip:/tmp
```

In VPN Server
```
cp /tmp/client1.crt ~/client-configs/keys/
cd ~/client-configs
sudo ./make_config.sh client1

```

## Revoking Client Certificates
In CA Server
```
cd ~/EasyRSA-3.0.4/
./easyrsa  revoke client2

```

## Install VPN manager in client for Ubuntu 18
```
sudo apt install network-manager-openvpn-gnome
```

https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-18-04