Topic: openvpn-bridge - No more certificate confusion.

[mudra]

I have followed the instructions on the new wiki page for the openvpn-bridge contrib and everything works well until I have to install the certificates. I have installed the PHPKi contrib as well. I am running an SME 7.4 and I have never used any other contrib for VPN.

when I try and fill in the following information:-

    * A master Certificate (used to verify clients certificates)
    * The server certificate (used by clients to verify the server)
    * The server private key associated with the certificate
    * Diffie-Helman parameters (Used to exchange the session key)
    * An optional key generate by openvpn to add TLS authentication

I am not sure what to fill in:

? Is the master certicate the same as the "root" certificate ?

I have created a "server" certificate; where do a I find the private key associated with this certicate ?

The other 2 keys I believe can be found via the PHPKi interface.

Can anyone point me in the right direction ?

I am sure that there is not a bug, I am sure that it is my understanding of the instructions / technique ?

Thanks for any help.

Mudra

EDITED: For a spelling mistake

[Tib]

I have to admit ... I'm having a bit of trouble understanding this as well.

Mine is a complete new install.

You have this in OpenVpn:

• A master Certificate (used to verify clients certificates)
  The server certificate (used by clients to verify the server)
  The server private key associated with the certificate
  Diffie-Helman parameters (Used to exchange the session key)
  An optional key generate by openvpn to add TLS authentication

Then in Certificate Manager:

• E-Mail, SSL Client
  E-Mail, SSL Client, Code Signing
  SSL Server
  VPN Client Only
  VPN Server Only
  VPN Client, VPN Server
  Time Stamping

I'm not quite sure what ties up with what ... except the VPN server and vpn client cert of course but the rest I'm a bit baffled with as well.

I could use a bit of guidance as well please.

Regards,

Tib

[Daniel B.]

I've just added a small section in the wiki page to configure the certificates using PHPki: http://wiki.contribs.org/OpenVPN_Bridge#Using_PHPki_to_manage_the_certificates

I hope it'll help. Please, let me know.

[Tib]

VIP-ire,

Thanks very much ... That helped a lot.


Regards,

Tib

[mudra]

The extra information on the WIKI was the key to setting this up.

Thanks for the work on the contrib and helping me out with the email.

Mudra

[Daniel B.]

No problem, I'm glade my contribs are used

Do not hesitate to report bugs in the bug tracker, and to correct/enhance the wiki page (english isn't my natural language, so maybe some parts are not very clear for everyone).

Cheers