1e31 OpenVPN example of build-key-server - Telecomix Crypto Munitions Bureau

OpenVPN example of build-key-server

From Telecomix Crypto Munitions Bureau

Jump to: navigation, search

Example of building and signing keys needed for an OpenVPN-server named pool-is-closed. Notice that I am just hitting enter at every single question, except the very last one. You have already given all information you needed, its in the vars file.

belial:~/2.0# ./build-key-server pool-is-closed
Generating a 2048 bit RSA private key
writing new private key to 'pool-is-closed.key'
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
Country Name (2 letter code) [ZZ]:
State or Province Name (full name) [ZZ]:
Locality Name (eg, city) [Internets]:
Organization Name (eg, company) [Killer Clowns from Outer Space]:
Organizational Unit Name (eg, section) []:
Common Name (eg, your name or your server's hostname) [pool-is-closed]:
Email Address [do@not.mail.me]:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
Using configuration from /root/2.0/openssl.cnf
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
countryName           :PRINTABLE:'ZZ'
stateOrProvinceName   :PRINTABLE:'ZZ'
localityName          :PRINTABLE:'Internets'
organizationName      :PRINTABLE:'Killer Clowns from Outer Space'
commonName            :PRINTABLE:'pool-is-closed'
emailAddress          :IA5STRING:'do@not.mail.me'
Certificate is to be certified until Dec 23 22:19:30 2019 GMT (3650 days)
Sign the certificate? [y/n]:y

1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated
Personal tools