OpenVPN example of build-key
From Telecomix Crypto Munitions Bureau
Example of creating a client key for OpenVPN. Please come up with more creative names than "client0" :)
belial:~/2.0# ./build-key client0 Generating a 2048 bit RSA private key .+++ ........................+++ writing new private key to 'client0.key' ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [ZZ]: State or Province Name (full name) [ZZ]: Locality Name (eg, city) [Internets]: Organization Name (eg, company) [Killer Clowns from Outer Space]: Organizational Unit Name (eg, section) []: Common Name (eg, your name or your server's hostname) [client0]: Email Address [do@not.mail.me]: Please enter the following 'extra' attributes to be sent with your certificate request A challenge password []: An optional company name []: Using configuration from /root/2.0/openssl.cnf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows countryName :PRINTABLE:'ZZ' stateOrProvinceName :PRINTABLE:'ZZ' localityName :PRINTABLE:'Internets' organizationName :PRINTABLE:'Killer Clowns from Outer Space' commonName :PRINTABLE:'client0' emailAddress :IA5STRING:'do@not.mail.me' Certificate is to be certified until Dec 23 22:31:58 2019 GMT (3650 days) Sign the certificate? [y/n]:y 1 out of 1 certificate requests certified, commit? [y/n]y Write out database with 1 new entries Data Base Updated belial:~/2.0#
