This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
wiki:webui:administration:openvpn:pki [2021/09/22 15:44] tda |
wiki:webui:administration:openvpn:pki [2021/09/22 15:57] (current) tda |
||
|---|---|---|---|
| Line 519: | Line 519: | ||
| ==== P12 Packaging (PKCS#12) ==== | ==== P12 Packaging (PKCS#12) ==== | ||
| - | It is advised to have a PKCS#12 file containing the server certificate, the CA certificate, and the server private key. \\ | + | It is advised to have a PKCS#12 file containing the public certificate, the CA certificate, and the private key. \\ |
| - | This will be referenced in the ''pkcs12 <file>'' directive of the server and client configuration file. | + | This will be referenced in the ''pkcs12 <file>'' directive in the server and client's configuration file. |
| The Wirnet™ gateway uses the secrets in a PKCS#12 encoded file. Use the following command to generate a .p12 file from the generated certificates/keys: | The Wirnet™ gateway uses the secrets in a PKCS#12 encoded file. Use the following command to generate a .p12 file from the generated certificates/keys: | ||
| Line 545: | Line 545: | ||
| The password will have to be entered in the client configuration file (''client-openvpn.conf'') using the ''askpass'' directive. | The password will have to be entered in the client configuration file (''client-openvpn.conf'') using the ''askpass'' directive. | ||
| \\ | \\ | ||
| + | \\ | ||
| + | Note: if certificates have been generated by easyRSA, please replace the directory certs/ by issued/. | ||
| \\ | \\ | ||