Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When I read these howto's

on setting up an OpenVPN server, I see that only the last of the two have the step

. /etc/openvpn/easy-rsa/2.0/build-key-server server

Should that step also have been in the Fedora howto, or is it not required?

share|improve this question
up vote 3 down vote accepted

build-key-server is just a different type of key to use for OpenVPN. You could use any of the following and be ok

build-key mycert (no password protection)
build-key-pass mycert (with password protection)
build-key-pkcs12 mycert (PKCS #12 format)
build-key-server mycert (with nsCertType=server)
share|improve this answer
Ok, so ./build-inter mycert that Fedora have in their howto could be added your you list and therefore substitutes build-key-server? – Sandra Sep 1 '11 at 12:32

There are multiple options for building your keys with easy-rsa. Using the "build-key-server" builds the certificate as a server-only certificate (nsCertType=server) and requires the "ns-cert-type server" to be placed in your OpenVPN configuration file.

For the most comprehensive set of instructions, always refer to the official OpenVPN documentation:

share|improve this answer
Excellent. I can see that it is default in the client.conf, so I'll use it =) Thanks for pointing that out. – Sandra Sep 1 '11 at 12:52

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.