[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

[Openvpn-users] Query for Supporting a CA hierarchy for TLS server


  • Subject: [Openvpn-users] Query for Supporting a CA hierarchy for TLS server
  • From: Sean.OConnell@xxxxxxxxxxxxxx
  • Date: Mon, 1 Mar 2004 10:02:56 +0000


Hi,

I want to configure a TLS server, client to use a hierarchical structure of CAs i.e.

RootCA  - IntermediateCA - TLSServer Certificate
RootCA - IntermediateCA - TLSClient Certificate

The examples only cover a PKI infrastructure of depth 1.

However, I am a bit stuck in figuring out how to configure the 'ca', 'cert' options on the server and client
to handle the 3 required certificates, the Trust Root, the Intermediate certificate and the Operations End Entity
Certificate.
I know that the certs must be in PEM format, and you can concatentate them together, but alas I am not having much
success, since both openssl and openvpn only find the first certifiacte in the ca specified file, which are surrounded in BEGIN,
END CERTIFICATE section headers

Appreciate any help on this.

Regards

Sean