57 lines
1.0 KiB
Markdown
Executable File
57 lines
1.0 KiB
Markdown
Executable File
|
|
## Renew Server Key
|
|
In CA Server
|
|
```
|
|
cd ~/EasyRSA-3.0.4/
|
|
sudo ./easyrsa gen-crl
|
|
sudo cp /home/causr/EasyRSA-3.0.4/pki/crl.pem /etc/openvpn/crl.pem
|
|
```
|
|
Restart vpnserver
|
|
```
|
|
sudo systemctl restart openvpn.service
|
|
sudo systemctl status openvpn.service
|
|
|
|
```
|
|
## Generate client key
|
|
|
|
In VPN Server
|
|
```
|
|
cd ~/EasyRSA-3.0.4/
|
|
./easyrsa gen-req client1 nopass
|
|
cp pki/private/client1.key ~/client-configs/keys/
|
|
scp pki/reqs/client1.req causr@ca_ip:/tmp
|
|
|
|
```
|
|
|
|
|
|
In CA Server
|
|
```
|
|
cd ~/EasyRSA-3.0.4/
|
|
./easyrsa import-req /tmp/client1.req client1
|
|
./easyrsa sign-req client client1
|
|
scp pki/issued/client1.crt sammy@your_server_ip:/tmp
|
|
```
|
|
|
|
In VPN Server
|
|
```
|
|
cp /tmp/client1.crt ~/client-configs/keys/
|
|
cd ~/client-configs
|
|
sudo ./make_config.sh client1
|
|
|
|
```
|
|
|
|
## Revoking Client Certificates
|
|
In CA Server
|
|
```
|
|
cd ~/EasyRSA-3.0.4/
|
|
./easyrsa revoke client2
|
|
|
|
```
|
|
|
|
## Install VPN manager in client for Ubuntu 18
|
|
```
|
|
sudo apt install network-manager-openvpn-gnome
|
|
```
|
|
|
|
https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-18-04
|