reference/VPN.md

Renew Server Key

In CA Server

cd ~/EasyRSA-3.0.4/
sudo ./easyrsa gen-crl
sudo cp /home/causr/EasyRSA-3.0.4/pki/crl.pem /etc/openvpn/crl.pem

Restart vpnserver

sudo systemctl restart openvpn.service
sudo systemctl status openvpn.service

Generate client key

In VPN Server

cd ~/EasyRSA-3.0.4/
./easyrsa gen-req client1 nopass
cp pki/private/client1.key ~/client-configs/keys/
scp pki/reqs/client1.req causr@ca_ip:/tmp

In CA Server

cd ~/EasyRSA-3.0.4/
./easyrsa import-req /tmp/client1.req client1
./easyrsa sign-req client client1
scp pki/issued/client1.crt sammy@your_server_ip:/tmp

In VPN Server

cp /tmp/client1.crt ~/client-configs/keys/
cd ~/client-configs
sudo ./make_config.sh client1

Revoking Client Certificates

In CA Server

cd ~/EasyRSA-3.0.4/
./easyrsa  revoke client2

Install VPN manager in client for Ubuntu 18

sudo apt install network-manager-openvpn-gnome

https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-18-04