This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
wiki:webui:administration:openvpn:pki [2021/09/22 15:44] tda |
wiki:webui:administration:openvpn:pki [2021/09/22 15:57] (current) tda |
||
---|---|---|---|
Line 519: | Line 519: | ||
==== P12 Packaging (PKCS#12) ==== | ==== P12 Packaging (PKCS#12) ==== | ||
- | It is advised to have a PKCS#12 file containing the server certificate, the CA certificate, and the server private key. \\ | + | It is advised to have a PKCS#12 file containing the public certificate, the CA certificate, and the private key. \\ |
- | This will be referenced in the ''pkcs12 <file>'' directive of the server and client configuration file. | + | This will be referenced in the ''pkcs12 <file>'' directive in the server and client's configuration file. |
The Wirnet™ gateway uses the secrets in a PKCS#12 encoded file. Use the following command to generate a .p12 file from the generated certificates/keys: | The Wirnet™ gateway uses the secrets in a PKCS#12 encoded file. Use the following command to generate a .p12 file from the generated certificates/keys: | ||
Line 545: | Line 545: | ||
The password will have to be entered in the client configuration file (''client-openvpn.conf'') using the ''askpass'' directive. | The password will have to be entered in the client configuration file (''client-openvpn.conf'') using the ''askpass'' directive. | ||
\\ | \\ | ||
+ | \\ | ||
+ | Note: if certificates have been generated by easyRSA, please replace the directory certs/ by issued/. | ||
\\ | \\ | ||