OpenVPN example of build-key-server
From Telecomix Crypto Munitions Bureau
Example of building and signing keys needed for an OpenVPN-server named pool-is-closed. Notice that I am just hitting enter at every single question, except the very last one. You have already given all information you needed, its in the vars file.
belial:~/2.0# ./build-key-server pool-is-closed Generating a 2048 bit RSA private key ..............................................+++ .................+++ writing new private key to 'pool-is-closed.key' ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [ZZ]: State or Province Name (full name) [ZZ]: Locality Name (eg, city) [Internets]: Organization Name (eg, company) [Killer Clowns from Outer Space]: Organizational Unit Name (eg, section) []: Common Name (eg, your name or your server's hostname) [pool-is-closed]: Email Address [do@not.mail.me]: Please enter the following 'extra' attributes to be sent with your certificate request A challenge password []: An optional company name []: Using configuration from /root/2.0/openssl.cnf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows countryName :PRINTABLE:'ZZ' stateOrProvinceName :PRINTABLE:'ZZ' localityName :PRINTABLE:'Internets' organizationName :PRINTABLE:'Killer Clowns from Outer Space' commonName :PRINTABLE:'pool-is-closed' emailAddress :IA5STRING:'do@not.mail.me' Certificate is to be certified until Dec 23 22:19:30 2019 GMT (3650 days) Sign the certificate? [y/n]:y 1 out of 1 certificate requests certified, commit? [y/n]y Write out database with 1 new entries Data Base Updated belial:~/2.0#
