[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] Multipoint VPNs


  • Subject: Re: [Openvpn-users] Multipoint VPNs
  • From: Felipe Sanchez <izto@xxxxxxxxxxxxxxxxx>
  • Date: Sat, 4 Oct 2003 14:27:36 -0500 (CDT)


On Sat, 4 Oct 2003, Victor Hugo Velasco Esparza wrote:

> The problem is with the SSL, do I need to create the my-ca.crt, key
> files and csr files for each office??


You only need one CA certificate/private key pair, and you need one
cert/key for each peer. The peer's certs should be signed with your CA
key. Then you only have to copy the public CA cert to each peer and you
should be all set. The relevant options in your config files are these:

# Certificate Authority file
ca /etc/openvpn/ca.crt

# Our certificate/public key
cert /etc/openvpn/yourpc.crt

# Our private key
key /etc/openvpn/yourpc.key


Read the easy-rsa tutorial available at the OpenVPN homepage to learn how
to create the CA certs and how to use them for signing the other certs.





____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users