Backslash

Appearance

Blogs

 

  • OpenVPN Server

    OpenVPN Server ​

    So just a guide based on explanations from Google Gemini

    The following would be a set of commands and expected responses

    Step 1 Install ​

    sh
    sudo apt install openvpn easy-rsa -y

    Step 2 Initialize the PKI Directory ​

    Recommended: Create and secure a new directory for your CA

    sh
    make-cadir ~/openvpn-pki
cd ~/openvpn-pki

    Step 3 Create the Certificate Authority (CA) ​

    sh
    # Initialize the PKI environment
./easyrsa init-pki

    Response

    sh
    init-pki' complete; you may now create a CA or requests.

Your newly created PKI dir is:
* /home/atle/openvpn-pki/pki

Using Easy-RSA configuration:
* /home/atle/openvpn-pki/vars

    Build the CA. You will be prompted to enter a CA Passphrase. Make this secure and write it down.

    sh
    ./easyrsa build-ca

    Response

    sh
    CA creation complete. Your new CA certificate is at:
* /home/atle/openvpn-pki/pki/ca.crt

    Step 4 Generate Server Keys and Certificate ​

    Generate the server key and CSR. 'server' is the Common Name (CN). ./easyrsa gen-req server nopass

    sh
    Private-Key and Public-Certificate-Request files created.
Your files are:
* req: /home/atle/openvpn-pki/pki/reqs/server.req
* key: /home/atle/openvpn-pki/pki/private/server.ke

    Sign the server certificate using the CA. You will be prompted for the CA Passphrase.

    sh
    ./easyrsa sign-req server server

    Response

    sh
    * /home/atle/openvpn-pki/vars
Please check over the details shown below for accuracy. Note that this request
has not been cryptographically verified. Please be sure it came from a trusted
source or that you have verified the request checksum with the sender.
You are about to sign the following certificate:

  Requested CN:     'small'
  Requested type:   'server'
  Valid for:        '825' days


subject=
    commonName                = small

Type the word 'yes' to continue, or any other input to abort.
  Confirm requested details: yes

Using configuration from /home/atle/openvpn-pki/pki/1fa12698/temp.1.1
Enter pass phrase for /home/atle/openvpn-pki/pki/private/ca.key:
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
commonName            :ASN.1 12:'small'
Certificate is to be certified until Dec 30 21:42:44 2027 GMT (825 days)

Write out database with 1 new entries
Database updated

Notice

  • Bitcoin LND

    How to run and operate a Bitcoind LND node

  • FreeBSD Samsung Cronos

    How to install FreeBSD alongside Linux and dual boot from GRUB with EFI enabled on a Samsung Cronos

  • FreeBSD install

    How to install FreeBSD and get some basic stuff up and running

  • .NET Core cli commands

    Collection of typical operations on .NET (dotnet) CLI (command-line interface)

  • ES6 modules

    ES6 modules and how to use them correctly

  • JS useful tricks

    JS tricks and standard functions that is not so commonly used

  • Linux Network

    Commands and recipes for network operations

  • nmcli how to use

    Network manager command line interface how to do typical operations

  • SQL Server Docker

    How you use SQL Server in Linux environment using docker, sqlcmd and VSCode

  • SSH best practices

    How to utilize the security features of ssh and use great features like public key encryption

  • GIT tricks

    GIT tricks that are not so commonly used